CVE-2026-34238

MEDIUM

ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds

Published April 13, 2026Updated May 5, 2026Source: osv

Summary

An integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write. ``` ==1551685==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xea2fb818 at pc 0x56cbc42a bp 0xffc4ce48 sp 0xffc4ce38 WRITE of size 8 at 0xea2fb818 thread T0 ```

Remediation

Upgrade to the fixed version using your package manager.

NuGet

Update Magick.NET-Q16-HDRI-AnyCPU to 14.12.0 or later

dotnet add package Magick.NET-Q16-HDRI-AnyCPU --version 14.12.0

NuGet

Update Magick.NET-Q16-HDRI-x86 to 14.12.0 or later

dotnet add package Magick.NET-Q16-HDRI-x86 --version 14.12.0

NuGet

Update Magick.NET-Q16-x86 to 14.12.0 or later

dotnet add package Magick.NET-Q16-x86 --version 14.12.0

NuGet

Update Magick.NET-Q16-AnyCPU to 14.12.0 or later

dotnet add package Magick.NET-Q16-AnyCPU --version 14.12.0

NuGet

Update Magick.NET-Q8-AnyCPU to 14.12.0 or later

dotnet add package Magick.NET-Q8-AnyCPU --version 14.12.0

NuGet

Update Magick.NET-Q8-x86 to 14.12.0 or later

dotnet add package Magick.NET-Q8-x86 --version 14.12.0

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (6)

Package	Ecosystem	Affected	Fixed In
Magick.NET-Q16-HDRI-AnyCPU	nuget	10.0.0, 10.1.0, 11.0.0, 11.1.0 (+206 more)	14.12.0
Magick.NET-Q16-HDRI-x86	nuget	10.0.0, 10.1.0, 11.0.0, 11.1.0 (+206 more)	14.12.0
Magick.NET-Q16-x86	nuget	10.0.0, 10.1.0, 11.0.0, 11.1.0 (+225 more)	14.12.0
Magick.NET-Q16-AnyCPU	nuget	10.0.0, 10.1.0, 11.0.0, 11.1.0 (+209 more)	14.12.0
Magick.NET-Q8-AnyCPU	nuget	10.0.0, 10.1.0, 11.0.0, 11.1.0 (+209 more)	14.12.0
Magick.NET-Q8-x86	nuget	10.0.0, 10.1.0, 11.0.0, 11.1.0 (+225 more)	14.12.0

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-190
Integer OverflowMITRE
CWE-787
Out-of-bounds WriteMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 5.1 score means for each attack dimension.

Attack Vector

Local

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Frequently Asked Questions

What is CVE-2026-34238?: ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 5.1/10).
How do I check if my project is affected by CVE-2026-34238?: CVE-2026-34238 affects Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-HDRI-x86 and Magick.NET-Q16-x86 (and 3 more). Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-34238 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

5.1

Exploitation requires specific conditions or has limited impact. Remediate within weeks.

Also Known As

GHSA-26qp-ffjh-2x4v

Related CVEs

CVE-2026-25987
MEDIUM
ImageMagick has a heap buffer over-read in its MAP image decoder
CVE-2026-53465
MEDIUM
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
CVE-2026-53467
MEDIUM
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
CVE-2026-26283
MEDIUM
ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
CVE-2026-33905
MEDIUM
ImageMagick has an out-of-bounds read in sample operation
CVE-2026-56362
LOW
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
CVE-2026-56363
LOW
ImageMagick: Division by Zero in binomial kernel
CVE-2026-61859
LOW
ImageMagick: Policy Bypass in script operation due to missing checks

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies