{"id":"EUVD-2026-42888","revision":"f5c075b2b5884b479ba347b3b0b1b258","records":[{"revision":"f5c075b2b5884b479ba347b3b0b1b258","observedAt":"2026-11-03T11:08:13.247+00:00","statement":{"source":"euvd","id":"EUVD-2026-42888","aliases":["CVE-2026-56366","GHSA-377p-xr9w-8773"],"title":"ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service …","description":"ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","score":4.8,"severity":null}],"references":["https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9r56-3gjq-hqf7","https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-meta-reader-app1jpeg-error-path"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42888","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jul 10, 2026, 1:57:58 PM","dateUpdated":"Oct 29, 2026, 9:15:51 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2026:22829-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-55628","CVE-2026-56362","CVE-2026-56366","CVE-2026-56372","CVE-2026-56373","CVE-2026-56377","CVE-2026-61465","CVE-2026-61857","CVE-2026-61858","CVE-2026-61861","CVE-2026-61870"]},{"id":"WID-SEC-W-2026-0849","title":"ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service","vulnerabilityIds":["CVE-2026-33535","CVE-2026-33536","CVE-2026-56366","CVE-2026-56375"]},{"id":"openSUSE-SU-2026:21391-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-55628","CVE-2026-56362","CVE-2026-56366","CVE-2026-56372","CVE-2026-56373","CVE-2026-56377","CVE-2026-61465","CVE-2026-61857","CVE-2026-61858","CVE-2026-61861","CVE-2026-61870"]},{"id":"SUSE-SU-2026:3219-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-55628","CVE-2026-56362","CVE-2026-56366","CVE-2026-56372","CVE-2026-56373","CVE-2026-56375","CVE-2026-56377","CVE-2026-56379","CVE-2026-61464","CVE-2026-61465","CVE-2026-61857","CVE-2026-61858","CVE-2026-61859","CVE-2026-61860","CVE-2026-61861","CVE-2026-61862","CVE-2026-61863","CVE-2026-61864","CVE-2026-61865","CVE-2026-61866","CVE-2026-61867","CVE-2026-61868","CVE-2026-61869","CVE-2026-61870","CVE-2026-61872"]},{"id":"SUSE-SU-2026:3192-1","title":"Security update for ImageMagick","vulnerabilityIds":["CVE-2026-55628","CVE-2026-56362","CVE-2026-56366","CVE-2026-56373","CVE-2026-56377","CVE-2026-61464","CVE-2026-61857","CVE-2026-61862","CVE-2026-61863","CVE-2026-61868","CVE-2026-61869","CVE-2026-61870","CVE-2026-61872"]},{"id":"openSUSE-SU-2026:11273-1","title":"ImageMagick-7.1.2.27-2.1 on GA media","vulnerabilityIds":["CVE-2026-56366","CVE-2026-56372","CVE-2026-56373","CVE-2026-61465","CVE-2026-61857","CVE-2026-61858","CVE-2026-61861","CVE-2026-61870"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-42888","identifiers":["EUVD-2026-42888","CVE-2026-56366","GHSA-377p-xr9w-8773"]},"retained":false,"historicalAffected":[]}],"coverage":[]}