Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-56367

ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-15affected
  • 7.1.2-15unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 6.9.0 to < 6.9.13-40affected
  • 6.9.13-40unaffected

References