CVE-2026-56372: ImageMagick

Critical severity, CVSS 9.1. EPSS: 0.3% chance of exploitation in the next 30 days.

ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.

Affected products

• ImageMagick ImageMagick: before 7.1.2-19 (fixed in 7.1.2-19)

Published 2026-07-11. Last modified 2026-07-13.