← Database

CVE-2026-56361

LOW CVSS: 3.3 Published: 2026-06-30 Modified: 2026-07-02

Description

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations.

Affected Platforms

Imagemagick Imagemagick

Weakness Type

CWE-125

References