GHSA-422r-8c97-xcg4 (CVE-2026-62363)

Details

A heap buffer over-write can occur in the fx operation by passing a crafted argument.

Affected Packages(17 packages)

Magick.NET-Q16-AnyCPU

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-HDRI-AnyCPU

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-HDRI-OpenMP-arm64

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-HDRI-arm64

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-HDRI-x64

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-HDRI-x86

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-OpenMP-arm64

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-OpenMP-x64

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-arm64

NuGet

Fixed in:

14.15.0

Magick.NET-Q16-x64

NuGet

Fixed in:

14.15.0

References

PACKAGE

https://github.com/ImageMagick/ImageMagick

WEB

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4

ADVISORY

https://github.com/advisories/GHSA-422r-8c97-xcg4

WEB

https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0