CVE-2026-56361

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19

Description An off-by-one error exists in morphology validation, which allows out-of-bounds heap buffer reads. An attacker can trigger a heap buffer overflow by providing incorrect morphology parameters, leading to single pixel memory access violations.

Recommendations Update to version 7.1.2-19 or later.