Information Disclosure in ImageMagick via AES-CTR Nonce Reuse

Executive Summary

This vulnerability exists in ImageMagick versions before 7.1.2-22 and involves the PasskeyEncipherImage method. It is caused by the reuse of the AES-CTR nonce, which is a critical component in the encryption process.

Because the nonce is reused in the cipher implementation, attackers can exploit this flaw to recover plaintext information from images that are supposed to be encrypted, leading to information disclosure.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information contained within encrypted images processed by vulnerable versions of ImageMagick.

Attackers exploiting the nonce reuse can recover plaintext data, potentially exposing confidential or private information that was intended to be protected by encryption.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the CVE-2026-56369 vulnerability, you should update ImageMagick to version 7.1.2-22 or later, or 6.9.13-47 or later, where the issue with AES-CTR nonce reuse in the PasskeyEncipherImage method has been patched.

Avoid using vulnerable versions of ImageMagick in your environment to prevent attackers from exploiting the information disclosure flaw.

Useful 0 Not Useful 0