cve-2026-56363

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56363.json"
      }
    ],
    "title": "Imagemagick: ImageMagick - Division by Zero in Binomial Kernel Processing",
    "tracking": {
      "current_release_date": "2026-07-06T09:18:25+00:00",
      "generator": {
        "date": "2026-07-06T09:18:25+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "CVE-2026-56363",
      "initial_release_date": "2026-06-30T22:08:36.839000+00:00",
      "revision_history": [
        {
          "date": "2026-06-30T22:08:36.839000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-06T09:08:43+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-07-06T09:18:25+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 6",
                "product": {
                  "name": "Red Hat Enterprise Linux 6",
                  "product_id": "red_hat_enterprise_linux_6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 6"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux 7",
                "product": {
                  "name": "Red Hat Enterprise Linux 7",
                  "product_id": "red_hat_enterprise_linux_7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux 7"
          },
          {
            "category": "product_version",
            "name": "ImageMagick-perl",
            "product": {
              "name": "ImageMagick-perl",
              "product_id": "ImageMagick-perl",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick-perl"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ImageMagick.src",
            "product": {
              "name": "ImageMagick.src",
              "product_id": "ImageMagick.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ImageMagick-c++",
            "product": {
              "name": "ImageMagick-c++",
              "product_id": "ImageMagick-c++",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ImageMagick-doc",
            "product": {
              "name": "ImageMagick-doc",
              "product_id": "ImageMagick-doc",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick-doc"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ImageMagick-c++-devel",
            "product": {
              "name": "ImageMagick-c++-devel",
              "product_id": "ImageMagick-c++-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick-c%2B%2B-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ImageMagick",
            "product": {
              "name": "ImageMagick",
              "product_id": "ImageMagick",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick"
              }
            }
          },
          {
            "category": "product_version",
            "name": "ImageMagick-devel",
            "product": {
              "name": "ImageMagick-devel",
              "product_id": "ImageMagick-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/ImageMagick-devel"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick"
        },
        "product_reference": "ImageMagick",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-c++ as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick-c++"
        },
        "product_reference": "ImageMagick-c++",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-c++-devel as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick-c++-devel"
        },
        "product_reference": "ImageMagick-c++-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-devel as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick-devel"
        },
        "product_reference": "ImageMagick-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-doc as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick-doc"
        },
        "product_reference": "ImageMagick-doc",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-perl as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick-perl"
        },
        "product_reference": "ImageMagick-perl",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick.src as a component of Red Hat Enterprise Linux 6",
          "product_id": "red_hat_enterprise_linux_6:ImageMagick.src"
        },
        "product_reference": "ImageMagick.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick"
        },
        "product_reference": "ImageMagick",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-c++ as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick-c++"
        },
        "product_reference": "ImageMagick-c++",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-c++-devel as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick-c++-devel"
        },
        "product_reference": "ImageMagick-c++-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-devel as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick-devel"
        },
        "product_reference": "ImageMagick-devel",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-doc as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick-doc"
        },
        "product_reference": "ImageMagick-doc",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick-perl as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick-perl"
        },
        "product_reference": "ImageMagick-perl",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "ImageMagick.src as a component of Red Hat Enterprise Linux 7",
          "product_id": "red_hat_enterprise_linux_7:ImageMagick.src"
        },
        "product_reference": "ImageMagick.src",
        "relates_to_product_reference": "red_hat_enterprise_linux_7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-56363",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-06-30T23:01:08.040111+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2495408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A Denial of Service (DoS) vulnerability exists in ImageMagick. An attacker can crash the application and cause service unavailability by submitting a maliciously crafted image.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Imagemagick: ImageMagick - Division by Zero in Binomial Kernel Processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in ImageMagick is rated as Low impact. An attacker can trigger a denial of service by providing a specially crafted image that, when processed, causes an integer overflow and subsequent division by zero. This issue requires user interaction, as the vulnerable ImageMagick instance must process the malicious input.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "known_affected": [
          "red_hat_enterprise_linux_6:ImageMagick",
          "red_hat_enterprise_linux_6:ImageMagick-c++",
          "red_hat_enterprise_linux_6:ImageMagick-c++-devel",
          "red_hat_enterprise_linux_6:ImageMagick-devel",
          "red_hat_enterprise_linux_6:ImageMagick-doc",
          "red_hat_enterprise_linux_6:ImageMagick-perl",
          "red_hat_enterprise_linux_6:ImageMagick.src",
          "red_hat_enterprise_linux_7:ImageMagick",
          "red_hat_enterprise_linux_7:ImageMagick-c++",
          "red_hat_enterprise_linux_7:ImageMagick-c++-devel",
          "red_hat_enterprise_linux_7:ImageMagick-devel",
          "red_hat_enterprise_linux_7:ImageMagick-doc",
          "red_hat_enterprise_linux_7:ImageMagick-perl",
          "red_hat_enterprise_linux_7:ImageMagick.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56363"
        },
        {
          "category": "external",
          "summary": "RHBZ#2495408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56363"
        },
        {
          "category": "external",
          "summary": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vf33-6r7x-66xx",
          "url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vf33-6r7x-66xx"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/imagemagick-division-by-zero-in-binomial-kernel-processing",
          "url": "https://www.vulncheck.com/advisories/imagemagick-division-by-zero-in-binomial-kernel-processing"
        }
      ],
      "release_date": "2026-06-30T22:08:36.839000+00:00",
      "remediations": [
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid processing untrusted or unverified image files with ImageMagick. Implement robust input validation and sanitization for any image processing workflows that handle external content. Consider running ImageMagick within a sandboxed environment to further limit the impact of potential denial of service attacks.",
          "product_ids": [
            "red_hat_enterprise_linux_6:ImageMagick",
            "red_hat_enterprise_linux_6:ImageMagick-c++",
            "red_hat_enterprise_linux_6:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_6:ImageMagick-devel",
            "red_hat_enterprise_linux_6:ImageMagick-doc",
            "red_hat_enterprise_linux_6:ImageMagick-perl",
            "red_hat_enterprise_linux_6:ImageMagick.src",
            "red_hat_enterprise_linux_7:ImageMagick",
            "red_hat_enterprise_linux_7:ImageMagick-c++",
            "red_hat_enterprise_linux_7:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_7:ImageMagick-devel",
            "red_hat_enterprise_linux_7:ImageMagick-doc",
            "red_hat_enterprise_linux_7:ImageMagick-perl",
            "red_hat_enterprise_linux_7:ImageMagick.src"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "red_hat_enterprise_linux_6:ImageMagick",
            "red_hat_enterprise_linux_6:ImageMagick-c++",
            "red_hat_enterprise_linux_6:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_6:ImageMagick-devel",
            "red_hat_enterprise_linux_6:ImageMagick-doc",
            "red_hat_enterprise_linux_6:ImageMagick-perl",
            "red_hat_enterprise_linux_6:ImageMagick.src",
            "red_hat_enterprise_linux_7:ImageMagick",
            "red_hat_enterprise_linux_7:ImageMagick-c++",
            "red_hat_enterprise_linux_7:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_7:ImageMagick-devel",
            "red_hat_enterprise_linux_7:ImageMagick-doc",
            "red_hat_enterprise_linux_7:ImageMagick-perl",
            "red_hat_enterprise_linux_7:ImageMagick.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "red_hat_enterprise_linux_6:ImageMagick",
            "red_hat_enterprise_linux_6:ImageMagick-c++",
            "red_hat_enterprise_linux_6:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_6:ImageMagick-devel",
            "red_hat_enterprise_linux_6:ImageMagick-doc",
            "red_hat_enterprise_linux_6:ImageMagick-perl",
            "red_hat_enterprise_linux_6:ImageMagick.src",
            "red_hat_enterprise_linux_7:ImageMagick",
            "red_hat_enterprise_linux_7:ImageMagick-c++",
            "red_hat_enterprise_linux_7:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_7:ImageMagick-devel",
            "red_hat_enterprise_linux_7:ImageMagick-doc",
            "red_hat_enterprise_linux_7:ImageMagick-perl",
            "red_hat_enterprise_linux_7:ImageMagick.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low",
          "product_ids": [
            "red_hat_enterprise_linux_6:ImageMagick",
            "red_hat_enterprise_linux_6:ImageMagick-c++",
            "red_hat_enterprise_linux_6:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_6:ImageMagick-devel",
            "red_hat_enterprise_linux_6:ImageMagick-doc",
            "red_hat_enterprise_linux_6:ImageMagick-perl",
            "red_hat_enterprise_linux_6:ImageMagick.src",
            "red_hat_enterprise_linux_7:ImageMagick",
            "red_hat_enterprise_linux_7:ImageMagick-c++",
            "red_hat_enterprise_linux_7:ImageMagick-c++-devel",
            "red_hat_enterprise_linux_7:ImageMagick-devel",
            "red_hat_enterprise_linux_7:ImageMagick-doc",
            "red_hat_enterprise_linux_7:ImageMagick-perl",
            "red_hat_enterprise_linux_7:ImageMagick.src"
          ]
        }
      ],
      "title": "Imagemagick: ImageMagick - Division by Zero in Binomial Kernel Processing"
    }
  ]
}