CVE-2026-56367

MEDIUM 6.3

Published 2026-06-21 · Last modified 2026-06-22

ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 15th percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

6.3CVSS 4.0 · MEDIUM

ConfidentialityLow
IntegrityNone
AvailabilityNone

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
✓User interaction: No user interaction needed
⚠Complexity: Needs a race window or specific setup
⚠Requirements: Specific conditions must be present

✓ lowers the bar for an attacker · ⚠ raises it

Affected

Vendors Imagemagick

Products Imagemagick

Weakness (CWE)

CWE-125: Out-of-bounds read

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

References

Advisories

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4 vendor-advisory
https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-psb-rle-decoding third-party-advisory

Sources: NVD · CVE.org · EPSS