Imagemagick Imagemagick — CVE-2026-56372 (Critical)
Critical vendor advisory
CVE-2026-56372
Summary
ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the magnify operation that allows attackers to read out of bounds memory. An unrecognized magnify:method value triggers an out of bounds read, potentially exposing sensitive information or causing denial of service.
Why it matters
This CVE carries a CRITICAL severity rating (CVSS 3.3) in Imagemagick Imagemagick. Patch or mitigate promptly. EPSS percentile: 2%.
Operator check
Review CVE-2026-56372 in your asset inventory. Apply patches per vendor guidance and verify Imagemagick is not exposed. CVSS score: 3.3. EPSS probability: 0.1%; percentile: 2%.
Sources
PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.