What is GHSA-m366-rhm3-cx89?

GHSA-m366-rhm3-cx89 is a security advisory published by GitHub Security Advisories with Low severity. ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex...

Which CVE IDs does GHSA-m366-rhm3-cx89 cover?

GHSA-m366-rhm3-cx89 covers the following CVE IDs: CVE-2026-56362. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m366-rhm3-cx89?

GHSA-m366-rhm3-cx89 has a CVSS v3 base score of 3.3, published by GitHub Security Advisories.

GHSA-m366-rhm3-cx89LowCVSS 3.3

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex...

Vendor

GitHub Security Advisories

Published

July 8, 2026

Last Modified

July 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-56362 →

📋 Description

ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.

🔗 References (4)

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gq5v-qf8q-fp77
https://nvd.nist.gov/vuln/detail/CVE-2026-56362
https://www.vulncheck.com/advisories/imagemagick-heap-buffer-overflow-read-in-getpixelindex-via-openpixelcache-metadata-desynchronization
https://github.com/advisories/GHSA-m366-rhm3-cx89