Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-10T13:57:58 ImageMagick: ImageMagick: Use-after-free vulnerability in PDB decoder allows denial of service or limited data corruption. 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H CWE-825

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

A flaw was found in ImageMagick. This use-after-free vulnerability (CWE-416) exists within the PDB (Program Database) decoder. A remote attacker could exploit this by tricking a user into processing a specially crafted malicious PDB file. This could lead to a denial of service (DoS) due to application crashes or potentially allow for a single zero-byte write to freed memory, resulting in limited data corruption.

Red Hat Enterprise Linux 6 Out of support scope ImageMagick Red Hat Enterprise Linux 7 Out of support scope ImageMagick https://www.cve.org/CVERecord?id=CVE-2026-56373 https://nvd.nist.gov/vuln/detail/CVE-2026-56373 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4x-rwrx-xxj9 https://www.vulncheck.com/advisories/imagemagick-use-after-free-write-in-pdb-decoder