SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-56373

LOW · CVSS 3.7 EPSS 0.23% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-10 · Last synced 2026-08-09

CyberRota Analysis

AI-Generated

ImageMagick versions prior to 7.1.2-15 are susceptible to a use-after-free vulnerability in the PDB decoder, which can be exploited by processing crafted PDB files. This flaw may lead to application crashes or unintended memory manipulation, potentially allowing attackers to write a zero byte to freed memory. Organizations using ImageMagick for image processing should prioritize patching this vulnerability to mitigate risks associated with malicious file handling.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-56373
Severity
LOW
CVSS
3.7
EPSS
0.23%

Original NVD Description

ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

Related CVEs

Other vulnerabilities affecting the same vendor(s)