ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-56369 · Microsoft / collected KEV context

EUVD-2026-40449

GHSA-vgqj-4jhr-3wh5

GHSA-qv2q-c278-pch5

cve-program · CVE-2026-56369

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5
• https://www.vulncheck.com/advisories/imagemagick-information-disclosure-via-aes-ctr-nonce-reuse-in-passkeyencipherimage

euvd · EUVD-2026-40449

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5
• https://www.vulncheck.com/advisories/imagemagick-information-disclosure-via-aes-ctr-nonce-reuse-in-passkeyencipherimage

nvd · CVE-2026-56369

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5
• https://www.vulncheck.com/advisories/imagemagick-information-disclosure-via-aes-ctr-nonce-reuse-in-passkeyencipherimage

osv · GHSA-qv2q-c278-pch5

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5
• https://github.com/ImageMagick/ImageMagick
• https://imagemagick.org/cipher

• ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage · Affected-version evidence changed · 29 Oct 2026