Every CVE Search/ Get API key

CVE-2026-56362

ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

2.1 LowFix available

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
Low

Exploit likelihood

0.19%Unchanged since Jul 9, 2026
90%50%10%1%

What each source reports

CVE List Score used 2.1

ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
CVE-2026-56362
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
3.3 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-42259 2.1

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
EUVD-2026-42259
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-gq5v-qf8q-fp77 3.3

ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

OpenPixelCache updates image channel metadata before attempting pixel cache memory allocation. When both memory and disk allocation fail a heap-buffer-overflow read in occurs in any writer that calls GetPixelIndex.

Record
GHSA-gq5v-qf8q-fp77
CVSS 3.1
3.3 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-122, CWE-125
Updated
2026-11-02
GitHub AdvisoriesGHSA-m366-rhm3-cx89 2.1

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex...

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
GHSA-m366-rhm3-cx89
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
3.3 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-125
Updated
2026-11-02
NVD 2.1

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
CVE-2026-56362
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
3.3 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-125
Updated
2026-11-02
OSV 2.1

ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
CVE-2026-56362
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-125
Updated
2026-11-02
Show 14 moreShow less
OSVDEBIAN-CVE-2026-56362 4.2

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
DEBIAN-CVE-2026-56362
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVGHSA-gq5v-qf8q-fp77 3.3

ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

OpenPixelCache updates image channel metadata before attempting pixel cache memory allocation. When both memory and disk allocation fail a heap-buffer-overflow read in occurs in any writer that calls GetPixelIndex.

Record
GHSA-gq5v-qf8q-fp77
CVSS 3.1
3.3 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Weakness
CWE-122, CWE-125
Updated
2026-11-02
OSVJLSEC-2026-1043 2.1

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex...

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
JLSEC-2026-1043
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2026-56362 2.1

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Record
UBUNTU-CVE-2026-56362
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L
CVSS 3.1
3.3 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2026:11228-1 No score

ImageMagick-7.1.2.27-1.1 on GA media

These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11228-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21391-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).
Record
openSUSE-SU-2026:21391-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-56362 No score

CVE-2026-56362 in rootio-imagemagick - Patched by Root

Root has patched CVE-2026-56362 in the rootio-imagemagick package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-56362
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-56362 No score

CVE-2026-56362 in imagemagick - Patched by Root

Root has patched CVE-2026-56362 in the imagemagick package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-56362
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-56362 No score

CVE-2026-56362 in imagemagick - Patched by Root

Root has patched CVE-2026-56362 in the imagemagick package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-56362
Updated
2026-11-02
OSVSUSE-SU-2026:22829-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56377: Policy Bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61465: Policy Bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: Heap-use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: Policy Bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61861: Use-After-Free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61870: Memory leak in VIFF encoder when allocation fails (bsc#1271293).
Record
SUSE-SU-2026:22829-1
Updated
2026-11-02
OSVSUSE-SU-2026:3192-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
Record
SUSE-SU-2026:3192-1
Updated
2026-11-02
OSVSUSE-SU-2026:3193-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
Record
SUSE-SU-2026:3193-1
Updated
2026-11-02
OSVSUSE-SU-2026:3194-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues

  • CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61860: use-after-free when freetype initialization fails (bsc#1271494).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61871: memory leak in ICON decoder when allocation fails (bsc#1271485).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
Record
SUSE-SU-2026:3194-1
Updated
2026-11-02
OSVSUSE-SU-2026:3219-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
  • CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache (bsc#1271100).
  • CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
  • CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized magnify:method value (bsc#1271314).
  • CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
  • CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
  • CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
  • CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
  • CVE-2026-61465: policy bypass possible with matrix-backed operations (bsc#1271313).
  • CVE-2026-61857: heap use-after-free via XMP profile could result in a crash (bsc#1271312).
  • CVE-2026-61858: policy bypass in APNG encoder and delegates due to a missing check (bsc#1271311).
  • CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
  • CVE-2026-61860: use-after-free when freetype initialization fails (bsc#1271494).
  • CVE-2026-61861: use-after-free in FormatMagickCaption when memory allocation fails (bsc#1271294).
  • CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
  • CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
  • CVE-2026-61864: memory leak in color transformation to log colorspace when operation fails (bsc#1271491).
  • CVE-2026-61865: memory leak in hough lines operation when an operation fails (bsc#1271490).
  • CVE-2026-61866: memory leak in JNG encoder when a blob could not be opened (bsc#1271489).
  • CVE-2026-61867: memory leak in TIFF encoder when an allocation fails (bsc#1271488).
  • CVE-2026-61868: memory leak in YUV decoder when opening of blob fails (bsc#1271487).
  • CVE-2026-61869: memory leak in MIFF encoder when allocation fails (bsc#1271486).
  • CVE-2026-61870: memory leak in VIFF encoder when allocation fails (bsc#1271293).
  • CVE-2026-61872: memory leak in TIFF encoder when invalid tiff:tile-geometry is specified (bsc#1271484).
  • Extend CVE-2026-56379 patch by f63c78b (bsc#1268878).
Record
SUSE-SU-2026:3219-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
Magick.NET-Q16-AnyCPU
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-HDRI-OpenMP-x64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-OpenMP-x86
NuGet
 before 14.10.3
14.10.3
Show 44 moreShow less
Affected packages
PackageAffectedFixed
Magick.NET-Q16-arm64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-x64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q16-x86
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q8-AnyCPU
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q8-arm64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q8-x64
NuGet
 before 14.10.3
14.10.3
Magick.NET-Q8-x86
NuGet
 before 14.10.3
14.10.3
imagemagick
Debian:12
 before 8:6.9.11.60+dfsg-1.6+deb12u8, plus listed versions
8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:6.9.11.60+dfsg-1.6+deb12u7
8:6.9.11.60+dfsg-1.6+deb12u8
imagemagick
Debian:13
 before 8:7.1.1.43+dfsg1-1+deb13u12, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u108:7.1.1.43+dfsg1-1+deb13u118:7.1.1.43+dfsg1-1+deb13u2
Show 7 moreShow less
8:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u68:7.1.1.43+dfsg1-1+deb13u78:7.1.1.43+dfsg1-1+deb13u88:7.1.1.43+dfsg1-1+deb13u9
8:7.1.1.43+dfsg1-1+deb13u12
imagemagick
Debian:14
 before 8:7.1.2.15+dfsg1-1, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1
Show 5 moreShow less
8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.3+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1
8:7.1.2.15+dfsg1-1
Magick.NET-Q16-AnyCPU
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.8.10016.8.9.1
14.10.3
Magick.NET-Q16-HDRI-AnyCPU
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.9.1016.8.9.401
14.10.3
Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.08.6.1
14.10.3
Magick.NET-Q16-HDRI-OpenMP-x64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.17.14.07.14.0.1
14.10.3
Magick.NET-Q16-HDRI-arm64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.08.6.1
14.10.3
Magick.NET-Q16-HDRI-x64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.9.1016.8.9.401
14.10.3
Magick.NET-Q16-HDRI-x86
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.9.1016.8.9.401
14.10.3
Magick.NET-Q16-OpenMP-arm64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.08.6.1
14.10.3
Magick.NET-Q16-OpenMP-x64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.17.14.07.14.0.1
14.10.3
Magick.NET-Q16-arm64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.08.6.1
14.10.3
Magick.NET-Q16-x64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.10016.8.5.401
14.10.3
Magick.NET-Q16-x86
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.10016.8.5.401
14.10.3
Magick.NET-Q8-AnyCPU
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.8.10016.8.9.1
14.10.3
Magick.NET-Q8-OpenMP-arm64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.08.6.1
14.10.3
Magick.NET-Q8-OpenMP-x64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.17.14.07.14.0.1
14.10.3
Magick.NET-Q8-arm64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.18.6.08.6.1
14.10.3
Magick.NET-Q8-x64
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.10016.8.5.401
14.10.3
Magick.NET-Q8-x86
NuGet
 before 14.10.3, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.10.013.2.013.3.013.4.013.5.013.6.013.7.013.8.013.9.013.9.114.0.014.1.014.10.014.10.114.10.214.2.014.3.014.4.014.5.014.6.014.7.014.8.014.8.114.8.214.9.014.9.16.8.5.10016.8.5.401
14.10.3
ImageMagick_jll
Julia
 before 7.1.2023+0
7.1.2023+0
ImageMagick
SUSE:Linux Enterprise Server 16.0
From an advisory covering 11 CVEs
 before 7.1.2.0-160000.12.1
7.1.2.0-160000.12.1
ImageMagick
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 11 CVEs
 before 7.1.2.0-160000.12.1
7.1.2.0-160000.12.1
ImageMagick
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 13 CVEs
 before 6.8.8.1-71.264.1
6.8.8.1-71.264.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 23 CVEs
 before 7.1.0.9-150400.6.101.1
7.1.0.9-150400.6.101.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 25 CVEs
 before 7.1.1.43-150700.3.70.1
7.1.1.43-150700.3.70.1
ImageMagick
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 25 CVEs
 before 7.1.1.43-150700.3.70.1
7.1.1.43-150700.3.70.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 25 CVEs
 before 7.1.1.21-150600.3.80.2
7.1.1.21-150600.3.80.2
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 25 CVEs
 before 7.1.1.21-150600.3.80.2
7.1.1.21-150600.3.80.2
imagemagick
Ubuntu:25.10
 All versions, plus listed versions
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1ubuntu18:7.1.1.43+dfsg1-1ubuntu28:7.1.2.3+dfsg1-18:7.1.2.3+dfsg1-1ubuntu0.1
 None known
imagemagick
Ubuntu:26.10
 All versions, plus listed versions
8:7.1.2.18+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.27+dfsg1-18:7.1.2.31+dfsg1-1
 None known
imagemagick
Ubuntu:Pro:26.04:LTS
 All versions, plus listed versions
8:7.1.2.3+dfsg1-18:7.1.2.8+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-1
Show 6 moreShow less
8:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.18+dfsg1-1ubuntu0.1~esm18:7.1.2.18+dfsg1-1ubuntu0.1~esm28:7.1.2.18+dfsg1-1ubuntu0.1~esm38:7.1.2.18+dfsg1-1ubuntu0.1~esm4
 None known
ImageMagick
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
 before 7.1.2.27-1.1
7.1.2.27-1.1
ImageMagick
openSUSE:Leap 16.0
From an advisory covering 11 CVEs
 before 7.1.2.0-160000.12.1
7.1.2.0-160000.12.1

History

History
RecordedChangedSources
affected, facts
affected
affected, aliases, references
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-56362 is a low vulnerability (CVSS 2.1) in Imagemagick, published February 25, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in Magick.NET-Q16-AnyCPU 14.10.3.

References

Show 75 moreShow less
This page doesn't list everything

Left out here: 1,678 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open