ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger this leak by processing specially crafted images, causing memory exhaustion and denial of service.

A flaw was found in ImageMagick. This memory leak vulnerability exists in multiple coders that write raw pixel data, where allocated objects are not properly freed. A remote attacker can exploit this by processing specially crafted images, leading to memory exhaustion and a denial of service.

A memory leak exists in ImageMagick's raw pixel data coders. Processing specially crafted, untrusted images can exhaust system memory and cause a Denial of Service (DoS). Modify the ImageMagick security policy file (policy.xml, typically located in /etc/ImageMagick-7/ or /etc/ImageMagick-6/) to disable the processing of RAW pixel data formats. Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-56368 https://nvd.nist.gov/vuln/detail/CVE-2026-56368 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wfx3-6g53-9fgc https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-raw-pixel-data-coders