← Database

CVE-2026-56369

LOW CVSS: 3.7 Published: 2026-06-30 Modified: 2026-07-02

Description

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images.

Affected Platforms

Imagemagick Imagemagick

Weakness Type

CWE-323

References