CVE-2026-56361

LOW

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations.

CVSS v3.1 Score

3.3
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Attack Vector
LOCAL
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Published: 6/30/2026Modified: 7/2/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-56361 — ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validatio...

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations.

CVE-2026-56361
NIST NVD

References (2)

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q8h3-jv9v-57qxVendor Advisoryhttps://www.vulncheck.com/advisories/imagemagick-heap-buffer-overflow-via-off-by-one-in-morphology-processingThird Party Advisory