NetSight
IP …
high7.5

CVE-2026-46520

ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions

Impact

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23.

Affected packages

EcosystemPackageAffectedFixed in
nugetMagick.NET-Q16-AnyCPU< 14.13.114.13.1
nugetMagick.NET-Q16-HDRI-AnyCPU< 14.13.114.13.1
nugetMagick.NET-Q16-HDRI-OpenMP-arm64< 14.13.114.13.1
nugetMagick.NET-Q16-HDRI-OpenMP-x64< 14.13.114.13.1
nugetMagick.NET-Q16-HDRI-arm64< 14.13.114.13.1
nugetMagick.NET-Q16-HDRI-x64< 14.13.114.13.1
nugetMagick.NET-Q16-HDRI-x86< 14.13.114.13.1
nugetMagick.NET-Q16-OpenMP-arm64< 14.13.114.13.1
nugetMagick.NET-Q16-OpenMP-x64< 14.13.114.13.1
nugetMagick.NET-Q16-arm64< 14.13.114.13.1
nugetMagick.NET-Q16-x64< 14.13.114.13.1
nugetMagick.NET-Q16-x86< 14.13.114.13.1
nugetMagick.NET-Q8-AnyCPU< 14.13.114.13.1
nugetMagick.NET-Q8-OpenMP-arm64< 14.13.114.13.1
nugetMagick.NET-Q8-OpenMP-x64< 14.13.114.13.1
nugetMagick.NET-Q8-arm64< 14.13.114.13.1
nugetMagick.NET-Q8-x64< 14.13.114.13.1
nugetMagick.NET-Q8-x86< 14.13.114.13.1

Affected products

VendorProductAffected versions
ImagemagickImagemagick
before 6.9.13-48
from 7.0.0-0 before 7.1.2-23

Weakness classification

CWE-122CWE-787

References