This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-56368 →

DEBIAN-CVE-2026-56368

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly...

Original description

The description as published by the source.

ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.6+deb12u12"}]}]

Debian:13 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.1.43+dfsg1-1+deb13u11"}]}]

Debian:14 imagemagick

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.15+dfsg1-1"}]}]

References

advisory security-tracker.debian.org