# Magick.NET-Q16-OpenMP-x86 (NuGet) vulnerabilities

68 known vulnerabilities (1 critical, 12 high, 52 medium, 2 low), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://www.nuget.org/packages/Magick.NET-Q16-OpenMP-x86

## Advisories (68)

### [CVE-2026-56375](https://cve.now/CVE-2026-56375): ImageMagick - Memory Leak in ASHLAR Coder Action Failure

- Severity: Medium 4.8
- Published: Jul 15, 2026
- Affected: fixed in 14.11.1.

### [CVE-2026-56373](https://cve.now/CVE-2026-56373): ImageMagick - Use-After-Free Write in PDB Decoder

- Severity: Medium 6.3
- Published: Jul 10, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56366](https://cve.now/CVE-2026-56366): ImageMagick - Memory Leak in META Reader APP1JPEG Error Path

- Severity: Medium 4.8
- Published: Jul 10, 2026
- Affected: fixed in 14.11.1.

### [CVE-2026-56362](https://cve.now/CVE-2026-56362): ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization

- Severity: Low 2.1
- Published: Jul 8, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56364](https://cve.now/CVE-2026-56364): ImageMagick - Memory Leak in LoadOpenCLDeviceBenchmark() via Malformed XML

- Severity: Low 1.8
- Published: Jun 30, 2026
- Affected: fixed in 14.10.2.

### [CVE-2026-56368](https://cve.now/CVE-2026-56368): ImageMagick - Memory Leak in Raw Pixel Data Coders

- Severity: Medium 6.3
- Published: Jun 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56379](https://cve.now/CVE-2026-56379): ImageMagick - Command Injection via SVG Decoder

- Severity: Critical 9.2
- Published: Jun 23, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56376](https://cve.now/CVE-2026-56376): ImageMagick - Heap Use-After-Free in Meta Coder

- Severity: Medium 6.3
- Published: Jun 23, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56371](https://cve.now/CVE-2026-56371): ImageMagick - Memory Leak in TXT File Processing via Texture Attribute

- Severity: Medium 6.9
- Published: Jun 23, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56378](https://cve.now/CVE-2026-56378): ImageMagick - Heap Out-of-Bounds Read in PCD Decoder

- Severity: Medium 6.3
- Published: Jun 21, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-56367](https://cve.now/CVE-2026-56367): ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding

- Severity: Medium 6.3
- Published: Jun 21, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-33536](https://cve.now/CVE-2026-33536): ImageMagick has an Out-of-bounds Write via InterpretImageFilename

- Severity: Medium 5.1
- Published: Mar 26, 2026
- Affected: fixed in 14.11.1.

### [CVE-2026-33535](https://cve.now/CVE-2026-33535): ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

- Severity: Medium 4.0
- Published: Mar 26, 2026
- Affected: fixed in 14.11.1.

### [CVE-2026-32636](https://cve.now/CVE-2026-32636): ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash

- Severity: Medium 5.3
- Published: Mar 18, 2026
- Affected: fixed in 14.11.0.

### [CVE-2026-31853](https://cve.now/CVE-2026-31853): ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

- Severity: Medium 5.7
- Published: Mar 11, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-30937](https://cve.now/CVE-2026-30937): ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes\_per\_line calculation

- Severity: Medium 6.8
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-30936](https://cve.now/CVE-2026-30936): ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage

- Severity: Medium 5.5
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-30935](https://cve.now/CVE-2026-30935): ImageMagick has a heap Buffer Over-Read in BilateralBlurImage

- Severity: Medium 4.4
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-30931](https://cve.now/CVE-2026-30931): ImageMagick has a heap-based buffer overflow in UHDR encoder

- Severity: Medium 6.8
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-30929](https://cve.now/CVE-2026-30929): ImageMagick has a stack buffer overflow in MagnifyImage

- Severity: High 7.7
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-30883](https://cve.now/CVE-2026-30883): ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder

- Severity: Medium 5.7
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28693](https://cve.now/CVE-2026-28693): ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write

- Severity: High 8.1
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28692](https://cve.now/CVE-2026-28692): ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

- Severity: Medium 4.8
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28691](https://cve.now/CVE-2026-28691): ImageMagick has an uninitialized pointer dereference in JBIG decoder

- Severity: High 7.5
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28690](https://cve.now/CVE-2026-28690): ImageMagick has a stack write buffer overflow in MNG encoder

- Severity: Medium 6.9
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28689](https://cve.now/CVE-2026-28689): ImageMagick has a Path Policy TOCTOU symlink race bypass

- Severity: Medium 6.3
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28688](https://cve.now/CVE-2026-28688): ImageMagick has a heap use-after-free in the MSL encoder

- Severity: Medium 4.0
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28687](https://cve.now/CVE-2026-28687): ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder

- Severity: Medium 5.3
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28686](https://cve.now/CVE-2026-28686): ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer

- Severity: Medium 6.8
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28494](https://cve.now/CVE-2026-28494): ImageMagick affected by stack corruption through long morphology kernel names or arrays

- Severity: High 7.1
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-28493](https://cve.now/CVE-2026-28493): ImageMagick has a Integer Overflow leading to out of bounds write in SIXEL decoder

- Severity: Medium 6.5
- Published: Mar 9, 2026
- Affected: fixed in 14.10.4.

### [CVE-2026-27799](https://cve.now/CVE-2026-27799): ImageMagick has a heap Buffer Over-read in its DJVU image format handler

- Severity: Medium 4.0
- Published: Feb 25, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-27798](https://cve.now/CVE-2026-27798): ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

- Severity: Medium 4.0
- Published: Feb 25, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-26983](https://cve.now/CVE-2026-26983): ImageMagick: Invalid MSL \<map\> can result in a use after free

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-26284](https://cve.now/CVE-2026-26284): ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.

- Severity: Medium 6.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-26283](https://cve.now/CVE-2026-26283): ImageMagick has possible infinite loop in JPEG encoder when using \`jpeg:extent\`

- Severity: Medium 6.2
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-26066](https://cve.now/CVE-2026-26066): ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

- Severity: Medium 6.2
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25989](https://cve.now/CVE-2026-25989): ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

- Severity: High 7.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25988](https://cve.now/CVE-2026-25988): ImageMagick's MSL image stack index not refreshed, leading to leaked images.

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25987](https://cve.now/CVE-2026-25987): ImageMagick has heap buffer over-read in MAP image decoder

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25986](https://cve.now/CVE-2026-25986): ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25985](https://cve.now/CVE-2026-25985): Memory allocation with excessive without limits in the internal SVG decoder

- Severity: High 7.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25983](https://cve.now/CVE-2026-25983): ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25982](https://cve.now/CVE-2026-25982): ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

- Severity: Medium 6.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25971](https://cve.now/CVE-2026-25971): ImageMagick's MSL: Stack overflow in ProcessMSLScript

- Severity: Medium 6.2
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25970](https://cve.now/CVE-2026-25970): ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25969](https://cve.now/CVE-2026-25969): ImageMagick has Memory Leak in coders/ashlar.c

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25968](https://cve.now/CVE-2026-25968): ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

- Severity: High 7.4
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25967](https://cve.now/CVE-2026-25967): ImageMagick has stack buffer overflow in FTXT reader via oversized integer field

- Severity: High 7.4
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25966](https://cve.now/CVE-2026-25966): ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

- Severity: Medium 5.9
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25965](https://cve.now/CVE-2026-25965): ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

- Severity: High 8.6
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25898](https://cve.now/CVE-2026-25898): Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

- Severity: Medium 6.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25897](https://cve.now/CVE-2026-25897): ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write

- Severity: Medium 6.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25799](https://cve.now/CVE-2026-25799): ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25798](https://cve.now/CVE-2026-25798): ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25797](https://cve.now/CVE-2026-25797): ImageMagick vulnerable to Code injection via PostScript header in ps coders

- Severity: Medium 5.7
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25796](https://cve.now/CVE-2026-25796): ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25795](https://cve.now/CVE-2026-25795): ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25794](https://cve.now/CVE-2026-25794): ImageMagick has heap-buffer-overflow via signed integer overflow in \`WriteUHDRImage\` when writing UHDR images with large dimensions

- Severity: High 8.2
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25638](https://cve.now/CVE-2026-25638): ImageMagick has memory leak in msl encoder

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25637](https://cve.now/CVE-2026-25637): ImageMagick: Possible memory leak in ASHLAR encoder

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-25576](https://cve.now/CVE-2026-25576): ImageMagick: Out of bounds read in multiple coders read raw pixel data

- Severity: Medium 5.1
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-24485](https://cve.now/CVE-2026-24485): ImageMagick: Infinite loop vulnerability when parsing a PCD file

- Severity: High 7.5
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-24484](https://cve.now/CVE-2026-24484): ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

- Severity: Medium 5.3
- Published: Feb 24, 2026
- Affected: fixed in 14.10.3.

### [CVE-2026-23952](https://cve.now/CVE-2026-23952): ImageMagick has a NULL pointer dereference in MSL parser via \<comment\> tag before image load

- Severity: Medium 6.5
- Published: Jan 22, 2026
- Affected: fixed in 14.10.2.

### [CVE-2026-22770](https://cve.now/CVE-2026-22770): ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails

- Severity: Medium 6.5
- Published: Jan 20, 2026
- Affected: fixed in 14.10.2.

### [CVE-2025-53015](https://cve.now/CVE-2025-53015): ImageMagick has XMP profile write that triggers hang due to unbounded loop

- Severity: High 7.5
- Published: Jul 14, 2025
- Affected: fixed in 14.7.0.

### [CVE-2023-1289](https://cve.now/CVE-2023-1289): A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault.

- Severity: Unrated
- Published: Mar 23, 2023
- Affected: fixed in 13.0.0.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/nuget/magick.net-q16-openmp-x86
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.