CVE-2026-56365

Received Received - Intake

BaseFortify

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: VulnCheck

Description

ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-30

Last Modified

2026-06-30

Generated

2026-07-01

AI Q&A

2026-07-01

EPSS Evaluated

N/A

NVD

CVE-2026-56365

EUVD

EUVD-2026-40448

Affected Vendors & Products

Vendor	Product	Version / Range
imagemagick	imagemagick	to 7.1.2-19 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability exists in ImageMagick versions before 7.1.2-19 and involves a memory leak in the PNG encoder when writing MNG images.

Attackers can exploit this flaw by triggering the encoder failure condition, which causes the program to consume excessive memory resources.

This can lead to a denial of service as the system's memory is exhausted.

Impact Analysis

The primary impact of this vulnerability is a denial of service condition.

By exploiting the memory leak in the PNG encoder, an attacker can cause the affected system to run out of memory, potentially crashing or becoming unresponsive.

Hi! I’m here to help you understand CVE-2026-56365. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70