CVE-2026-56376

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description A heap use-after-free exists in the meta coder. This occurs when memory allocation fails and a single byte is written to a stale pointer. Remote attackers can trigger this condition by processing specially crafted image files, leading to a denial of service. A heap use-after-free is a memory corruption issue where the program continues to use a pointer after the memory it points to has been freed.

Recommendations Update to version 7.1.2-15 or later. Update to version 6.9.13-40 or later.