CVE-2026-56375 in ImageMagick

Resumen

por MITRE • 2026-07-15

ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulnCheck
• Reservar: 2026-06-21
• Divulgación: 2026-07-15
• Moderación: aceptado
• Artículo: VDB-379216
• CPE: listo
• CWE: CWE-401 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Pharma, Police, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-56375
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-56375
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-56375/