ImageMagick - Use-After-Free Write in PDB Decoder

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-56373 · Microsoft / collected KEV context

EUVD-2026-42889

GHSA-j6f7-9c5w-9r2q

GHSA-3j4x-rwrx-xxj9

cve-program · CVE-2026-56373

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4x-rwrx-xxj9
• https://www.vulncheck.com/advisories/imagemagick-use-after-free-write-in-pdb-decoder

euvd · EUVD-2026-42889

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4x-rwrx-xxj9
• https://www.vulncheck.com/advisories/imagemagick-use-after-free-write-in-pdb-decoder

nvd · CVE-2026-56373

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4x-rwrx-xxj9
• https://www.vulncheck.com/advisories/imagemagick-use-after-free-write-in-pdb-decoder

osv · GHSA-3j4x-rwrx-xxj9

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4x-rwrx-xxj9
• https://github.com/ImageMagick/ImageMagick/commit/168ffe18def968f886c023146a478897866fd621
• https://github.com/ImageMagick/ImageMagick
• https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3

• ImageMagick - Use-After-Free Write in PDB Decoder · Affected-version evidence changed · 29 Oct 2026