ImageMagick - Heap Out-of-Bounds Read in PCD Decoder

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-56378 · Microsoft / collected KEV context

EUVD-2026-38174

GHSA-jmqv-2mx7-544h

GHSA-wgxp-q8xq-wpp9

cve-program · CVE-2026-56378

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
• https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder

euvd · EUVD-2026-38174

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
• https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder

nvd · CVE-2026-56378

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
• https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder

osv · GHSA-jmqv-2mx7-544h

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
• https://nvd.nist.gov/vuln/detail/CVE-2026-56378
• https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder

osv · GHSA-wgxp-q8xq-wpp9

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9
• https://nvd.nist.gov/vuln/detail/CVE-2026-56378
• https://github.com/ImageMagick/ImageMagick/commit/436e5d2589e3c0adc10d9aa189e81d5d088d8207
• https://github.com/ImageMagick/ImageMagick
• https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3
• https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-pcd-decoder

• ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS · Advisory content revised · 6 Nov 2026
• ImageMagick - Heap Out-of-Bounds Read in PCD Decoder · Affected-version evidence changed · 29 Oct 2026