CVE-2026-56378

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description A heap out-of-bounds read exists in the PCD coder's DecodeImage loop. A specially crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, which may lead to a denial of service or the disclosure of an adjacent heap byte.

Recommendations Update to version 7.1.2-15 or later. Update to version 6.9.13-40 or later.