Logo
vulnerabilityCVE-2026-56366
Name
CVE-2026-56366
Source
NVD ( link)Debian ( link)
Description
ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
imagemagick
Exploitable

Vulnerability Ratings#


4.8
CVSSv4
3.3
CVSSv31
6.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.1.2-26
Not Affected
buildroot
master
7.1.2-26
Not Affected
openwrt
master
7.1.2.29-r1
Not Affected
openwrt
openwrt-25.12
7.1.2.1-r1
Not Affected
yocto
master
7.1.2-29
Not Affected
yocto
scarthgap
7.1.1-47
Exploitable