CVE-2026-56363

MEDIUM4.8

ImageMagick - Division by Zero in Binomial Kernel Processing

Published Jun 30, 2026

Modified 3 weeks ago

Details

ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large binomial kernel value causing integer overflow, resulting in division by zero and application crash.

References

ADVISORY

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vf33-6r7x-66xx

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-56363

ADVISORY

https://www.vulncheck.com/advisories/imagemagick-division-by-zero-in-binomial-kernel-processing

CVSS Analysis

CVSS v4.0

4.8

Exploitability

Attack Vector