Feed/CVE-2026-56376
CVE-2026-56376LOWCVSS 3.7

CVE-2026-56376

Published Jun 23, 2026·Updated Sep 24, 2026

NVD Description

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it by processing specially crafted image files, causing a denial of service.

Affected Packages (17)

Magick.NET-Q16-HDRI-x86NUGET
Fixed in 14.10.3
Magick.NET-Q16-HDRI-x64NUGET
Fixed in 14.10.3
Magick.NET-Q8-x86NUGET
Fixed in 14.10.3
Magick.NET-Q8-arm64NUGET
Fixed in 14.10.3
Magick.NET-Q8-OpenMP-x64NUGET
Fixed in 14.10.3
Magick.NET-Q8-x64NUGET
Fixed in 14.10.3
Magick.NET-Q16-HDRI-OpenMP-x64NUGET
Fixed in 14.10.3
Magick.NET-Q8-OpenMP-arm64NUGET
Fixed in 14.10.3
Magick.NET-Q8-AnyCPUNUGET
Fixed in 14.10.3
Magick.NET-Q16-OpenMP-x86NUGET
Fixed in 14.10.3
Magick.NET-Q16-OpenMP-x64NUGET
Fixed in 14.10.3
Magick.NET-Q16-OpenMP-arm64NUGET
Fixed in 14.10.3
Magick.NET-Q16-HDRI-arm64NUGET
Fixed in 14.10.3
Magick.NET-Q16-HDRI-OpenMP-arm64NUGET
Fixed in 14.10.3
Magick.NET-Q16-HDRI-AnyCPUNUGET
Fixed in 14.10.3
Magick.NET-Q16-AnyCPUNUGET
Fixed in 14.10.3
Magick.NET-Q16-arm64NUGET
Fixed in 14.10.3

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free