LOW 3.7 NuGet
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
GHSA-wgxp-q8xq-wpp9 · CVE-2026-56378
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
The PCD coder’s DecodeImage loop allows a crafted PCD file to trigger a 1‑byte heap out-of-bounds read when decoding an image (Denial of service) and potential disclosure of adjacent heap byte.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes