Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD6.3 Medium

CVE-2026-56378

ImageMagick - Heap Out-of-Bounds Read in PCD Decoder

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-15affected
  • 7.1.2-15unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-40affected
  • 6.9.13-40unaffected

References