LOW 3.7 NuGet
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
GHSA-wgxp-q8xq-wpp9 · CVE-2026-56378
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
The PCD coder’s DecodeImage loop allows a crafted PCD file to trigger a 1‑byte heap out-of-bounds read when decoding an image (Denial of service) and potential disclosure of adjacent heap byte.
References
- WEB https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-56378
- WEB https://github.com/ImageMagick/ImageMagick/commit/436e5d2589e3c0adc10d9aa189e81d5d088d8207
- PACKAGE https://github.com/ImageMagick/ImageMagick
- WEB https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3
- WEB https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder
Ready to move
Start Securing
Free, no credit card | First findings in minutes