CVE-2026-56378

Katalog CVE

CVSS 8.2 · High EPSS 0,39%

Kerentanan Out-of-bounds Read pada imagemagick. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte.

Rincian

Terbit di NVD

21 Juni 2026

Terakhir diubah

26 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9 advisory pihak ketiga
• https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder advisory pihak ketiga