CVE Catalog
CVE-2026-56375
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk0.11%
2th percentile - higher than 2% of all known CVEs
Summary
A memory leak vulnerability in ImageMagick through version 7.1.2-18 exists in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.
Risk Assessment
The risk is a potential denial-of-service attack by exhausting memory, which can disrupt services relying on ImageMagick.
Recommendation
It is recommended to upgrade ImageMagick to a version later than 7.1.2-18, which includes a fix for the memory leak in the ASHLAR coder.
Original NVD description (English source)
ImageMagick through 7.1.2-18 contains a memory leak vulnerability in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.