Back to overview

CVE-2026-56371

0.0
CVSS 3.1
Description
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT file with a texture attribute is processed.

Metadata

CVE ID
CVE-2026-56371
State
PUBLISHED
Assigner
VulnCheck
Reserved
2026-06-21 02:05 UTC
Published
2026-06-23 12:13 UTC
Last updated
2026-06-23 12:13 UTC
Primary CWE
CWE-401
Missing Release of Memory after Effective Lifetime
Vendor / Product
ImageMagick / ImageMagick
Sources
cve.org  ·  NVD

Severity & Metrics

0.0 N/D CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
ImageMagick ImageMagick — 0 < 7.1.2-15, 7.1.2-15
ImageMagick ImageMagick — 0 < 6.9.13-40, 6.9.13-40
Weakness (CWE)
CWESourceDescription
CWE-401 cna Missing Release of Memory after Effective Lifetime
CVSS scores (2)
ScoreSeverityVersionSourceVector
0.0 N/D 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N
0.0 N/D 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
References (2)
Back to overview