# CVE-2026-56361

> ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations.

- **CVSS:** 3.3 (LOW)
- **EPSS:** 0.1%
- **CWE:** CWE-125

Canonical: https://intel.threadlinqs.com/cve/CVE-2026-56361
Full threat coverage + IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp