CVE-2026-56372

MEDIUM4.8

ImageMagick - Heap Buffer Overflow Read via Unrecognized Magnify Method

Published Jul 11, 2026

Modified 1 weeks ago

Details

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.

References

ADVISORY

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8vfj-q2cp-5m5j

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-56372

ADVISORY

https://www.vulncheck.com/advisories/imagemagick-heap-buffer-overflow-read-via-unrecognized-magnify-method

CVSS Analysis

CVSS v4.0

4.8

Exploitability

Attack Vector