Get real-time updates on Telegram
CVE-2026-56364: imagemagick before 7.1.2-13 (exclusive); +1 more affected products
CVE-2026-56364. CVSS 3.1 base score 1.9 (LOW, Vendor/CNA). EPSS 0.00154 (percentile 0.04193), scored 24-Oct-2026.
Affected technology
imagemagick · before 7.1.2-13 (exclusive)
imagemagick
ImageMagick · 0 to before 7.1.2-13
ImageMagick
Description’s affected range: before 7.1.2-13
Component: Not specified by the source
Function: when
Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · No user interaction required
What an attacker can do
Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory and cause denial of service. Vendor/CNA’s CVSS 4.0 assessment (base score 1.8/10) rates confidentiality and integrity impact as none; availability impact as low.
- CWE
- CWE-401
- CCR priority
- 7.6 /100 (P5)
- CVSS 3.1
- 1.9 /10 · CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L · Vendor/CNA
- EPSS
- 0.00154 · percentile 0.0449 · 2026-10-25
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-25 19:52:47.952465+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-25 19:51:06.643138+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-56364.html