CVE-2026-56372
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A heap buffer overflow vulnerability in ImageMagick before 7.1.2-19 in the magnify operation allows out-of-bounds memory read. An unrecognized magnify:method value triggers the issue, potentially exposing sensitive information or causing denial of service.
Risk Assessment
Attackers can exploit this vulnerability to read sensitive memory contents or cause a denial of service, compromising system confidentiality and availability.
Recommendation
Immediately upgrade ImageMagick to version 7.1.2-19 or later, which includes the fix for this vulnerability.
Original NVD description (English source)
ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.