Threat Intelligence / CVE / CVE-2026-56365
CVE-2026-56365
As of 2026-07-01, CVE-2026-56365 is a CVSS 3.7 (LOW-severity) vulnerability. EPSS exploitation probability 0.3%. Threadlinqs Intelligence tracks 0 threats exploiting it.
Last updated: 2026-07-01
ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses (CWE)
CWE-401
References
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x928-4434-crqj
- https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-png-encoder-via-mng-image-writing
Full detection coverage & IOCs for threats exploiting CVE-2026-56365 are available via the Threadlinqs MCP server (Purple tier). View plans →
← all vulnerabilities · Markdown version · Threadlinqs Intelligence
Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.