medium6.5
CVE-2026-28493
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
Impact
An integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted mage.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| nuget | Magick.NET-Q16-AnyCPU | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-HDRI-AnyCPU | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-HDRI-OpenMP-arm64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-HDRI-arm64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-HDRI-x64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-HDRI-x86 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-OpenMP-arm64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-OpenMP-x64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-OpenMP-x86 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-arm64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-x64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-x86 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q16-HDRI-OpenMP-x64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q8-AnyCPU | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q8-OpenMP-arm64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q8-OpenMP-x64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q8-arm64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q8-x64 | < 14.10.4 | 14.10.4 |
| nuget | Magick.NET-Q8-x86 | < 14.10.4 | 14.10.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagemagick | Imagemagick | before 7.1.2-16 |