Memory Leak Vulnerability in ImageMagick Affecting Texture Processing

CVE-2026-56371

What is CVE-2026-56371?

A memory leak issue exists in ImageMagick prior to version 7.1.2-15 and 6.9.13-40, specifically in the coders/txt.c component. This vulnerability arises when processing TXT files that contain texture attributes. When the ReadImage function allocates a texture object and subsequently the GetTypeMetrics function fails, the allocated memory is not properly released. As a result, each crafted TXT file processed can cause progressive memory leaks, potentially leading to increased resource consumption and impacting system performance.

References