UBUNTU-CVE-2026-56372

CRITICAL9.1

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an

Published Jul 11, 2026

Modified 1 weeks ago

Details

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.

Affected Packages

imagemagick

Ubuntu Pro 26.04 LTS

Affected versions:

8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-1

References

REPORT

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8vfj-q2cp-5m5j

REPORT

https://ubuntu.com/security/CVE-2026-56372

REPORT

https://www.cve.org/CVERecord?id=CVE-2026-56372

REPORT

https://www.vulncheck.com/advisories/imagemagick-heap-buffer-overflow-read-via-unrecognized-magnify-method

CVSS Analysis

CVSS v4.0

Exploitability