What is GHSA-377p-xr9w-8773?

GHSA-377p-xr9w-8773 is a security advisory published by GitHub Security Advisories with Medium severity. ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when...

Which CVE IDs does GHSA-377p-xr9w-8773 cover?

GHSA-377p-xr9w-8773 covers the following CVE IDs: CVE-2026-56366. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-377p-xr9w-8773?

GHSA-377p-xr9w-8773 has a CVSS v3 base score of 3.3, published by GitHub Security Advisories.

GHSA-377p-xr9w-8773MediumCVSS 3.3

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when...

Vendor

GitHub Security Advisories

Published

July 10, 2026

Last Modified

July 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-56366 →

📋 Description

ImageMagick before 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

🔗 References (4)

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9r56-3gjq-hqf7
https://nvd.nist.gov/vuln/detail/CVE-2026-56366
https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-meta-reader-app1jpeg-error-path
https://github.com/advisories/GHSA-377p-xr9w-8773