CVE-2026-56367

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description An integer overflow exists in the PSB (PSD v2) RLE decoding path within the ReadPSDChannelRLE() function located in coders/psd.c. On 32-bit builds, this flaw causes a heap out-of-bounds read, which occurs when the system reads data outside the intended buffer boundaries. Processing a specially crafted PSB file can result in a crash or information disclosure.

Recommendations Update to version 7.1.2-15 or later. Update to version 6.9.13-40 or later.