CVE-2026-56366— ImageMagick - Memory Leak in META Reader APP1JPEG Error Path
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56366
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ImageMagick - Memory Leak in META Reader APP1JPEG Error Path
Source: NVD (National Vulnerability Database)
Vulnerability Description
ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
在移除最后引用时对内存的释放不恰当(内存泄露)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ImageMagick | ImageMagick | 0 ~ 7.1.2-18 | - | |
| ImageMagick | ImageMagick | 0 ~ 6.9.13-43 | - |
II. Public POCs for CVE-2026-56366
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56366
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56366 (2)
IV. Related Vulnerabilities
Same product: ImageMagick
- CVE-2026-56373
ImageMagick - Use-After-Free Write in PDB Decoder - CVE-2026-56374
ImageMagick - Heap Buffer Overflow in FTXT Encoder via forma - CVE-2026-56362
ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via - CVE-2026-55597
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due - CVE-2026-55595
ImageMagick: Infinite Loop in connected-components when prov
Same vendor: ImageMagick
- CVE-2026-56373
ImageMagick - Use-After-Free Write in PDB Decoder - CVE-2026-56374
ImageMagick - Heap Buffer Overflow in FTXT Encoder via forma - CVE-2026-56362
ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via - CVE-2026-55597
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due - CVE-2026-55595
ImageMagick: Infinite Loop in connected-components when prov
Same weakness: CWE-401
- CVE-2026-57027
Junos OS: EX4100 Series, EX4400: With sFlow configured in a - CVE-2026-10699
Memory leak in SFTP service can result in a denial of servic - CVE-2026-13698
OpenVPN 资源管理错误漏洞 - CVE-2026-13708
Imager::File::JPEG versions before 1.003 for Perl leak heap - CVE-2026-56364
ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via
V. Comments for CVE-2026-56366
No comments yet