CVE-2026-56368

Katalog CVE

CVSS 7.5 · High EPSS 0,46%

Kerentanan Missing Release of Memory after Effective Lifetime pada imagemagick. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and denial of service.

Rincian

Terbit di NVD

24 Juni 2026

Terakhir diubah

26 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,46% peluang dieksploitasi; lebih tinggi dari 38,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wfx3-6g53-9fgc advisory vendor
• https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-raw-pixel-data-coders advisory pihak ketiga