GHSA-w8mw-frc6-r7m8 (CVE-2026-26983)

Details

The MSL interpreter crashes when processing a invalid <map> element that causes it to use an image after it has been freed.

Affected Packages(19 packages)

Magick.NET-Q16-AnyCPU

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-AnyCPU

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-OpenMP-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-OpenMP-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-x86

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-x86

NuGet

Fixed in:

14.10.3

References

PACKAGE

https://github.com/ImageMagick/ImageMagick

WEB

https://github.com/ImageMagick/ImageMagick/commit/7cfae4da24a995fb05386d77364ff404a7cca7bc

WEB

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w8mw-frc6-r7m8

ADVISORY

https://github.com/advisories/GHSA-w8mw-frc6-r7m8

WEB

https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2026-26983