CVE-2026-56375

ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.

Score

CVSS 4.0 4.8 Medium

Status

Deferred - disclosure@vulncheck.com

Published

2026-07-15

Last modified

2026-10-25

Weaknesses

CWE-401

Affected products

• Imagemagick (Imagemagick)

References

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p22-q7w5-33pg
• https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-ashlar-coder-action-failure