Skip to main content

ImageMagick EUVDEUVD-2026-40449

| CVE-2026-56369 MEDIUM
Reusing a Nonce, Key Pair in Encryption (CWE-323)
2026-06-30 VulnCheck GHSA-vgqj-4jhr-3wh5
Information Disclosure Red Hat Imagemagick Suse
6.3
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
6.3 MEDIUM
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
3.7 LOW

Network vector because encrypted images traverse networks; AC:H for required same-nonce ciphertext collection; PR:N since no authentication to ImageMagick itself is needed; C:L for partial plaintext recovery only.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
SUSE
3.7 LOW
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Red Hat
3.7 LOW
qualitative

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Patch available
Jul 01, 2026 - 02:16 EUVD
Analysis Generated
Jun 30, 2026 - 23:33 vuln.today

DescriptionCVE.org

ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information from encrypted images.

AnalysisAI

Nonce reuse in ImageMagick's AES-CTR cipher implementation exposes encrypted image plaintext to recovery attacks. The PasskeyEncipherImage method in ImageMagick before 7.1.2-22 reuses nonces when performing AES in Counter mode, violating the fundamental security requirement that a nonce be used exactly once per key. A network-accessible attacker who can collect multiple ciphertexts produced with the same passkey and nonce can XOR the outputs to cancel the shared keystream and partially or fully recover encrypted image content. No active exploitation has been identified (not in CISA KEV), and no public exploit code is known at time of analysis.

Technical ContextAI

AES-CTR (Counter Mode) is a stream-cipher construction where plaintext is XORed with a keystream derived from AES(key, nonce || counter). The critical property of CTR mode is that reusing the same (key, nonce) pair across two plaintexts means both share an identical keystream - XORing the two resulting ciphertexts cancels the keystream entirely, yielding the XOR of the two plaintexts, from which both can often be recovered statistically or structurally. CWE-323 (Reusing a Nonce, Key Pair in Encryption) precisely classifies this root cause. The affected function is PasskeyEncipherImage, ImageMagick's built-in image-encryption feature, identified via CPE cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* covering all versions prior to the fix. The vulnerability is cryptographic in nature - not a memory-safety or injection issue - meaning it leaves no crash signature and may be difficult to detect in logs.

RemediationAI

Upgrade ImageMagick to version 7.1.2-22 or later, which resolves the AES-CTR nonce reuse in PasskeyEncipherImage. The authoritative patch reference is the GitHub Security Advisory GHSA-qv2q-c278-pch5 at https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qv2q-c278-pch5. For deployments where immediate patching is not possible, the most targeted compensating control is to cease use of the PasskeyEncipherImage feature entirely - encrypted image processing can be deferred or offloaded to external, vetted encryption tooling (e.g., libsodium-based wrappers) without loss of core ImageMagick functionality. If image encryption must continue pre-patch, ensure that each encryption operation uses a unique, cryptographically random nonce and that no two images share the same passkey and session context - though this mitigation requires application-layer changes and may not be feasible without code modification. Note that discontinuing PasskeyEncipherImage will break any existing workflows relying on ImageMagick's native image encryption; plan decryption of existing encrypted assets prior to disabling.

More in Imagemagick

View all
CVE-2016-3714 HIGH POC
8.4 May 05

The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.
CVE-2016-3718 MEDIUM POC
5.5 May 05

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct

CVE-2016-3715 MEDIUM POC
5.5 May 05

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary fi
CVE-2017-15277 MEDIUM POC
6.5 Oct 12

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when proc
CVE-2016-5841 CRITICAL POC
9.8 Dec 13

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of serv
CVE-2016-3717 MEDIUM POC
5.5 May 05

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi
CVE-2016-5118 CRITICAL
9.8 Jun 10

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbit
CVE-2016-5689 CRITICAL POC
9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
CVE-2016-5690 CRITICAL POC
9.8 Dec 13

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to

CVE-2016-5691 CRITICAL POC
9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
CVE-2017-14138 CRITICAL POC
9.8 Sep 04

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in cer
CVE-2026-23876 CRITICAL POC
9.8 Jan 20

Heap buffer overflow in ImageMagick's XBM image decoder (ReadXBMImage) lets remote attackers write attacker-controlled d

Same weakness CWE-323 – Reusing a Nonce, Key Pair in Encryption

View all
CVE-2026-49952 CRITICAL POC
9.3
CVE-2026-59099 CRITICAL POC
9.3
CVE-2017-13082 HIGH POC
8.1
CVE-2025-46632 MEDIUM POC
6.5
CVE-2023-28997 MEDIUM POC
6.5
CVE-2017-7902 CRITICAL
9.8
CVE-2026-12205 CRITICAL
9.1
CVE-2019-7593 CRITICAL
9.1

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Low
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Affected
SUSE Linux Enterprise Module for Development Tools 15 SP7 Affected
SUSE Linux Enterprise Module for Package Hub 15 SP7 Not-Affected

Share

EUVD-2026-40449 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy