low3.7
CVE-2026-56369
ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse.
Impact
ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagemagick | Imagemagick | before 6.9.13-47 from 7.0.0-0 before 7.1.2-22 |