← Database

CVE-2026-56362

LOW CVSS: 3.3 Published: 2026-07-08 Modified: 2026-07-10

Description

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Affected Platforms

Imagemagick Imagemagick

Weakness Type

CWE-125

References