Loading...
Skip to main content
GeekWala

CVE-2026-25968

HIGH

ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.

Published March 12, 2026Updated March 14, 2026Source: osv

Summary

A stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. ``` ================================================================= ==278522==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffdb8c76984 at pc 0x55a4bf16f507 bp 0x7ffdb8c75bc0 sp 0x7ffdb8c75bb0 WRITE of size 1 at 0x7ffdb8c76984 thread T0 ```

Remediation

Upgrade to the fixed version using your package manager.

NuGet
Update Magick.NET-Q8-x86 to 14.10.3 or later
dotnet add package Magick.NET-Q8-x86 --version 14.10.3
NuGet
Update Magick.NET-Q16-HDRI-x64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-HDRI-x64 --version 14.10.3
NuGet
Update Magick.NET-Q16-HDRI-arm64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-HDRI-arm64 --version 14.10.3
NuGet
Update Magick.NET-Q16-HDRI-AnyCPU to 14.10.3 or later
dotnet add package Magick.NET-Q16-HDRI-AnyCPU --version 14.10.3
NuGet
Update Magick.NET-Q16-OpenMP-x86 to 14.10.3 or later
dotnet add package Magick.NET-Q16-OpenMP-x86 --version 14.10.3
NuGet
Update Magick.NET-Q16-x86 to 14.10.3 or later
dotnet add package Magick.NET-Q16-x86 --version 14.10.3
NuGet
Update Magick.NET-Q8-OpenMP-arm64 to 14.10.3 or later
dotnet add package Magick.NET-Q8-OpenMP-arm64 --version 14.10.3
NuGet
Update Magick.NET-Q16-AnyCPU to 14.10.3 or later
dotnet add package Magick.NET-Q16-AnyCPU --version 14.10.3
NuGet
Update Magick.NET-Q8-AnyCPU to 14.10.3 or later
dotnet add package Magick.NET-Q8-AnyCPU --version 14.10.3
NuGet
Update Magick.NET-Q16-HDRI-x86 to 14.10.3 or later
dotnet add package Magick.NET-Q16-HDRI-x86 --version 14.10.3
NuGet
Update Magick.NET-Q16-OpenMP-arm64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-OpenMP-arm64 --version 14.10.3
NuGet
Update Magick.NET-Q16-x64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-x64 --version 14.10.3
NuGet
Update Magick.NET-Q16-OpenMP-x64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-OpenMP-x64 --version 14.10.3
NuGet
Update Magick.NET-Q16-arm64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-arm64 --version 14.10.3
NuGet
Update Magick.NET-Q16-HDRI-OpenMP-x64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-HDRI-OpenMP-x64 --version 14.10.3
NuGet
Update Magick.NET-Q8-OpenMP-x64 to 14.10.3 or later
dotnet add package Magick.NET-Q8-OpenMP-x64 --version 14.10.3
NuGet
Update Magick.NET-Q8-arm64 to 14.10.3 or later
dotnet add package Magick.NET-Q8-arm64 --version 14.10.3
NuGet
Update Magick.NET-Q8-x64 to 14.10.3 or later
dotnet add package Magick.NET-Q8-x64 --version 14.10.3
NuGet
Update Magick.NET-Q16-HDRI-OpenMP-arm64 to 14.10.3 or later
dotnet add package Magick.NET-Q16-HDRI-OpenMP-arm64 --version 14.10.3

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (19)

PackageEcosystemAffectedFixed In
Magick.NET-Q8-x86
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+221 more)14.10.3
Magick.NET-Q16-HDRI-x64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+202 more)14.10.3
Magick.NET-Q16-HDRI-arm64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+50 more)14.10.3
Magick.NET-Q16-HDRI-AnyCPU
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+202 more)14.10.3
Magick.NET-Q16-OpenMP-x86
nuget
All versions14.10.3
Magick.NET-Q16-x86
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+221 more)14.10.3
Magick.NET-Q8-OpenMP-arm64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+50 more)14.10.3
Magick.NET-Q16-AnyCPU
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+205 more)14.10.3
Magick.NET-Q8-AnyCPU
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+205 more)14.10.3
Magick.NET-Q16-HDRI-x86
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+202 more)14.10.3
Magick.NET-Q16-OpenMP-arm64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+50 more)14.10.3
Magick.NET-Q16-x64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+221 more)14.10.3
Magick.NET-Q16-OpenMP-x64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+102 more)14.10.3
Magick.NET-Q16-arm64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+50 more)14.10.3
Magick.NET-Q16-HDRI-OpenMP-x64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+102 more)14.10.3
Magick.NET-Q8-OpenMP-x64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+102 more)14.10.3
Magick.NET-Q8-arm64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+50 more)14.10.3
Magick.NET-Q8-x64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+221 more)14.10.3
Magick.NET-Q16-HDRI-OpenMP-arm64
nuget
10.0.0, 10.1.0, 11.0.0, 11.1.0 (+50 more)14.10.3

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 7.4 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

References

Frequently Asked Questions

What is CVE-2026-25968?
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write. This vulnerability has been assigned a severity rating of HIGH (CVSS score: 7.4/10).
How do I check if my project is affected by CVE-2026-25968?
CVE-2026-25968 affects Magick.NET-Q8-x86, Magick.NET-Q16-HDRI-x64 and Magick.NET-Q16-HDRI-arm64 (and 16 more). Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-25968 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
7.4

High exploitability or significant impact. Prioritize remediation within days.

Also Known As

GHSA-3mwp-xqp2-q6ph

Related CVEs

  • CVE-2026-25965
    HIGH

    ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy

  • CVE-2026-25794
    HIGH

    ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

  • CVE-2026-25987
    MEDIUM

    ImageMagick has a heap buffer over-read in its MAP image decoder

  • CVE-2026-28686
    MEDIUM

    ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer

  • CVE-2026-33536
    MEDIUM

    ImageMagick has an Out-of-bounds Write via InterpretImageFilename

  • CVE-2026-25637
    MEDIUM

    ImageMagick: Possible memory leak in ASHLAR encoder

  • CVE-2026-26283
    MEDIUM

    ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`

  • CVE-2026-56362
    LOW

    ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies