Low severity3.3NVD Advisory· Published Jun 24, 2026· Updated Jun 26, 2026
CVE-2026-56370
CVE-2026-56370
Description
ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attackers can trigger access violations by specifying malformed connected-components definitions via CLI, causing denial of service or potential code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*range: <6.9.13-44
- (no CPE)range: <7.1.2-19
- ghsa-coords20 versionspkg:nuget/magick.net-q16-anycpupkg:nuget/magick.net-q16-arm64pkg:nuget/magick.net-q16-hdri-anycpupkg:nuget/magick.net-q16-hdri-arm64pkg:nuget/magick.net-q16-hdri-openmp-arm64pkg:nuget/magick.net-q16-hdri-openmp-x64pkg:nuget/magick.net-q16-hdri-x64pkg:nuget/magick.net-q16-hdri-x86pkg:nuget/magick.net-q16-openmp-arm64pkg:nuget/magick.net-q16-openmp-x64pkg:nuget/magick.net-q16-x64pkg:nuget/magick.net-q16-x86pkg:nuget/magick.net-q8-anycpupkg:nuget/magick.net-q8-arm64pkg:nuget/magick.net-q8-openmp-arm64pkg:nuget/magick.net-q8-openmp-x64pkg:nuget/magick.net-q8-x64pkg:nuget/magick.net-q8-x86pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
< 14.12.0+ 19 more
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 14.12.0
- (no CPE)range: < 7.1.2.0-160000.10.1
- (no CPE)range: < 7.1.2.25-3.1
Patches
Vulnerability mechanics
References
4- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmpg-6pww-fg6qnvdVendor Advisory
- github.com/advisories/GHSA-pmpg-6pww-fg6qghsaADVISORY
- www.vulncheck.com/advisories/imagemagick-out-of-bounds-access-in-connectedcomponentsimage-via-connected-components-artifactnvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2026-56370ghsa
News mentions
0No linked articles in our index yet.