Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-56362

Fixed in a distro release EPSS <1%CVSS 3.3

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

Published 2026-07-08 · CVE record · OSV

Products: imagemagick

Fixed upstream

EcosystemPackageFixed in
NuGetMagick.NET-Q16-AnyCPU14.10.3
NuGetMagick.NET-Q16-HDRI-AnyCPU14.10.3
NuGetMagick.NET-Q16-HDRI-OpenMP-arm6414.10.3
NuGetMagick.NET-Q16-HDRI-OpenMP-x6414.10.3
NuGetMagick.NET-Q16-HDRI-arm6414.10.3
NuGetMagick.NET-Q16-HDRI-x6414.10.3
NuGetMagick.NET-Q16-HDRI-x8614.10.3
NuGetMagick.NET-Q16-OpenMP-arm6414.10.3
NuGetMagick.NET-Q16-OpenMP-x6414.10.3
NuGetMagick.NET-Q16-OpenMP-x8614.10.3
NuGetMagick.NET-Q16-arm6414.10.3
NuGetMagick.NET-Q16-x6414.10.3
NuGetMagick.NET-Q16-x8614.10.3
NuGetMagick.NET-Q8-AnyCPU14.10.3
NuGetMagick.NET-Q8-OpenMP-arm6414.10.3
NuGetMagick.NET-Q8-OpenMP-x6414.10.3
NuGetMagick.NET-Q8-arm6414.10.3
NuGetMagick.NET-Q8-x6414.10.3
NuGetMagick.NET-Q8-x8614.10.3

Distro releases

ReleasePackageFixed in
Amazon Linux 2ImageMagick6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-c++6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-c++-devel6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-devel6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-doc6.9.10.97-1.amzn2.0.32
Amazon Linux 2ImageMagick-perl6.9.10.97-1.amzn2.0.32
Amazon Linux 2023ImageMagick1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-c++1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-c++-devel1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-devel1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-doc1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-libs1:6.9.13.54-1.amzn2023
Amazon Linux 2023ImageMagick-perl1:6.9.13.54-1.amzn2023
Debian 12imagemagick8:6.9.11.60+dfsg-1.6+deb12u8
Debian 13imagemagick8:7.1.1.43+dfsg1-1+deb13u12
Debian 14imagemagick8:7.1.2.15+dfsg1-1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.0.9-150400.6.101.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7ImageMagick7.1.1.43-150700.3.70.1
SUSE Linux Enterprise Module for Development Tools 15 SP7ImageMagick7.1.1.43-150700.3.70.1
SUSE Linux Enterprise Server 15 SP6-LTSSImageMagick7.1.1.21-150600.3.80.2
SUSE Linux Enterprise Server 16.0ImageMagick7.1.2.0-160000.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5ImageMagick6.8.8.1-71.264.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6ImageMagick7.1.1.21-150600.3.80.2
SUSE Linux Enterprise Server for SAP applications 16.0ImageMagick7.1.2.0-160000.12.1
Ubuntu 25.10imagemagickno fix
Ubuntu 26.10imagemagickno fix
Ubuntu Pro 26.04 LTSimagemagickno fix
openSUSE Leap 16.0ImageMagick7.1.2.0-160000.12.1
openSUSE TumbleweedImageMagick7.1.2.27-1.1