CVE-2026-4756

HIGH 7.8CVE-2026-4756 · Published 24/03/2026 · updated 17/06/2026

In short

CVE-2026-4756 is a HIGH (CVSS 7.8) vulnerability affecting android-imagemagick7 (molotovcherry).
Chance of exploitation in the next 30 days (EPSS): 0.11%, higher than 1.6% of all vulnerabilities.
Fix: update to 7.1.2-11 or later.

Package	Affected versions	Patched versions
android-imagemagick7 molotovcherry	`< 7.1.2-11`	`7.1.2-11`

Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.