What is GHSA-8g9f-ccmr-vfvg?

GHSA-8g9f-ccmr-vfvg is a security advisory published by GitHub Security Advisories with Medium severity. ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when...

Which CVE IDs does GHSA-8g9f-ccmr-vfvg cover?

GHSA-8g9f-ccmr-vfvg covers the following CVE IDs: CVE-2026-56376. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8g9f-ccmr-vfvg?

GHSA-8g9f-ccmr-vfvg has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

GHSA-8g9f-ccmr-vfvgMediumCVSS 3.7

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when...

Vendor

GitHub Security Advisories

Published

June 23, 2026

Last Modified

June 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-56376 →

📋 Description

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it by processing specially crafted image files, causing a denial of service.

🔗 References (4)

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2gq3-ww97-wfjm
https://nvd.nist.gov/vuln/detail/CVE-2026-56376
https://www.vulncheck.com/advisories/imagemagick-heap-use-after-free-in-meta-coder
https://github.com/advisories/GHSA-8g9f-ccmr-vfvg