ghsa-273h-m46v-96q4
CVSS 3.7 osv_nuget
Description
An integer overflow in the PSB (PSD v2) RLE decoding path causes a heap out-of-bounds read on 32-bit builds. This can lead to information disclosure or a crash when processing crafted PSB files. ``` ================================================================= ==3298==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf512eb00 at pc 0xf76760b5 bp 0xffc1dfb8 sp 0xffc1dfa8 READ of size 8 at 0xf512eb00 thread T0 #0 0xf76760b4 in ReadPSDChannelRLE coders/psd.c:1141 ```
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4
- https://nvd.nist.gov/vuln/detail/CVE-2026-25984
- https://github.com/ImageMagick/ImageMagick/commit/5b91ab69af614024255fd93dcc9a62b41fbc435c
- https://github.com/ImageMagick/ImageMagick
- https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3
Linked Vulnerabilities
No linked vulnerabilities found.
{
"affected": [
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-AnyCPU",
"purl": "pkg:nuget/Magick.NET-Q16-AnyCPU"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.8.1001",
"6.8.9.1",
"6.8.9.101",
"6.8.9.2",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-HDRI-AnyCPU",
"purl": "pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.9.101",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-HDRI-OpenMP-arm64",
"purl": "pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-HDRI-OpenMP-x64",
"purl": "pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-HDRI-arm64",
"purl": "pkg:nuget/Magick.NET-Q16-HDRI-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-HDRI-x64",
"purl": "pkg:nuget/Magick.NET-Q16-HDRI-x64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.9.101",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-HDRI-x86",
"purl": "pkg:nuget/Magick.NET-Q16-HDRI-x86"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.9.101",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-OpenMP-arm64",
"purl": "pkg:nuget/Magick.NET-Q16-OpenMP-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-OpenMP-x64",
"purl": "pkg:nuget/Magick.NET-Q16-OpenMP-x64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-OpenMP-x86",
"purl": "pkg:nuget/Magick.NET-Q16-OpenMP-x86"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-arm64",
"purl": "pkg:nuget/Magick.NET-Q16-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-x64",
"purl": "pkg:nuget/Magick.NET-Q16-x64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.5.1001",
"6.8.5.401",
"6.8.5.402",
"6.8.6.301",
"6.8.6.601",
"6.8.6.801",
"6.8.7.1",
"6.8.7.101",
"6.8.7.501",
"6.8.7.502",
"6.8.7.901",
"6.8.8.1001",
"6.8.8.201",
"6.8.8.501",
"6.8.8.701",
"6.8.8.801",
"6.8.8.901",
"6.8.9.1",
"6.8.9.101",
"6.8.9.2",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q16-x86",
"purl": "pkg:nuget/Magick.NET-Q16-x86"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.5.1001",
"6.8.5.401",
"6.8.5.402",
"6.8.6.301",
"6.8.6.601",
"6.8.6.801",
"6.8.7.1",
"6.8.7.101",
"6.8.7.501",
"6.8.7.502",
"6.8.7.901",
"6.8.8.1001",
"6.8.8.201",
"6.8.8.501",
"6.8.8.701",
"6.8.8.801",
"6.8.8.901",
"6.8.9.1",
"6.8.9.101",
"6.8.9.2",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q8-AnyCPU",
"purl": "pkg:nuget/Magick.NET-Q8-AnyCPU"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.8.1001",
"6.8.9.1",
"6.8.9.101",
"6.8.9.2",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q8-OpenMP-arm64",
"purl": "pkg:nuget/Magick.NET-Q8-OpenMP-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q8-OpenMP-x64",
"purl": "pkg:nuget/Magick.NET-Q8-OpenMP-x64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q8-arm64",
"purl": "pkg:nuget/Magick.NET-Q8-arm64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q8-x64",
"purl": "pkg:nuget/Magick.NET-Q8-x64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.5.1001",
"6.8.5.401",
"6.8.5.402",
"6.8.6.301",
"6.8.6.601",
"6.8.6.801",
"6.8.7.1",
"6.8.7.101",
"6.8.7.501",
"6.8.7.502",
"6.8.7.901",
"6.8.8.1001",
"6.8.8.201",
"6.8.8.501",
"6.8.8.701",
"6.8.8.801",
"6.8.8.901",
"6.8.9.1",
"6.8.9.101",
"6.8.9.2",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
},
{
"database_specific": {
"source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-273h-m46v-96q4/GHSA-273h-m46v-96q4.json"
},
"package": {
"ecosystem": "NuGet",
"name": "Magick.NET-Q8-x86",
"purl": "pkg:nuget/Magick.NET-Q8-x86"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "14.10.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.1.0",
"11.0.0",
"11.1.0",
"11.1.1",
"11.1.2",
"11.2.0",
"11.2.1",
"11.3.0",
"12.0.0",
"12.0.1",
"12.1.0",
"12.2.0",
"12.2.1",
"12.2.2",
"12.3.0",
"13.0.0",
"13.0.1",
"13.1.0",
"13.1.1",
"13.1.2",
"13.1.3",
"13.10.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.5.0",
"13.6.0",
"13.7.0",
"13.8.0",
"13.9.0",
"13.9.1",
"14.0.0",
"14.1.0",
"14.10.0",
"14.10.1",
"14.10.2",
"14.2.0",
"14.3.0",
"14.4.0",
"14.5.0",
"14.6.0",
"14.7.0",
"14.8.0",
"14.8.1",
"14.8.2",
"14.9.0",
"14.9.1",
"6.8.5.1001",
"6.8.5.401",
"6.8.5.402",
"6.8.6.301",
"6.8.6.601",
"6.8.6.801",
"6.8.7.1",
"6.8.7.101",
"6.8.7.501",
"6.8.7.502",
"6.8.7.901",
"6.8.8.1001",
"6.8.8.201",
"6.8.8.501",
"6.8.8.701",
"6.8.8.801",
"6.8.8.901",
"6.8.9.1",
"6.8.9.101",
"6.8.9.2",
"6.8.9.401",
"6.8.9.501",
"6.8.9.601",
"7.0.0.1",
"7.0.0.10",
"7.0.0.101",
"7.0.0.102",
"7.0.0.103",
"7.0.0.104",
"7.0.0.11",
"7.0.0.12",
"7.0.0.13",
"7.0.0.14",
"7.0.0.15",
"7.0.0.16",
"7.0.0.17",
"7.0.0.18",
"7.0.0.19",
"7.0.0.2",
"7.0.0.20",
"7.0.0.21",
"7.0.0.22",
"7.0.0.3",
"7.0.0.4",
"7.0.0.5",
"7.0.0.6",
"7.0.0.7",
"7.0.0.8",
"7.0.0.9",
"7.0.1",
"7.0.1.100",
"7.0.1.101",
"7.0.1.500",
"7.0.2.100",
"7.0.2.400",
"7.0.2.600",
"7.0.2.900",
"7.0.2.901",
"7.0.2.902",
"7.0.3",
"7.0.3.1",
"7.0.3.300",
"7.0.3.500",
"7.0.3.501",
"7.0.3.502",
"7.0.3.901",
"7.0.3.902",
"7.0.4.100",
"7.0.4.400",
"7.0.4.700",
"7.0.4.701",
"7.0.5.500",
"7.0.5.501",
"7.0.5.502",
"7.0.5.800",
"7.0.5.900",
"7.0.6",
"7.0.6.100",
"7.0.6.1000",
"7.0.6.1001",
"7.0.6.1002",
"7.0.6.101",
"7.0.6.102",
"7.0.6.600",
"7.0.6.601",
"7.0.7",
"7.0.7.300",
"7.0.7.700",
"7.0.7.900",
"7.1.0",
"7.10.0",
"7.10.1",
"7.10.2",
"7.11.0",
"7.11.1",
"7.12.0",
"7.13.0",
"7.13.1",
"7.14.0",
"7.14.0.1",
"7.14.0.2",
"7.14.0.3",
"7.14.1",
"7.14.2",
"7.14.3",
"7.14.4",
"7.14.5",
"7.15.0",
"7.15.0.1",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.17.0",
"7.17.0.1",
"7.18.0",
"7.19.0",
"7.19.0.1",
"7.2.0",
"7.2.1",
"7.20.0",
"7.20.0.1",
"7.21.0",
"7.21.1",
"7.22.0",
"7.22.1",
"7.22.2",
"7.22.2.1",
"7.22.2.2",
"7.22.3",
"7.23.0",
"7.23.1",
"7.23.2",
"7.23.2.1",
"7.23.3",
"7.23.4",
"7.24.0",
"7.24.1",
"7.3.0",
"7.4.0",
"7.4.1",
"7.4.2",
"7.4.3",
"7.4.4",
"7.4.5",
"7.4.6",
"7.5.0",
"7.5.0.1",
"7.6.0",
"7.6.0.1",
"7.7.0",
"7.8.0",
"7.9.0",
"7.9.0.1",
"7.9.0.2",
"7.9.1",
"7.9.2",
"8.0.0",
"8.0.1",
"8.1.0",
"8.2.0",
"8.2.1",
"8.3.0",
"8.3.1",
"8.3.2",
"8.3.3",
"8.4.0",
"8.5.0",
"8.6.0",
"8.6.1",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
}
],
"aliases": [
"CVE-2026-56367"
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-190"
],
"github_reviewed": true,
"github_reviewed_at": "2026-02-25T15:20:15Z",
"nvd_published_at": "2026-02-23T22:16:25Z",
"severity": "LOW"
},
"details": "An integer overflow in the PSB (PSD v2) RLE decoding path causes a heap out-of-bounds read on 32-bit builds. This can lead to information disclosure or a crash when processing crafted PSB files.\n\n```\n=================================================================\n==3298==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf512eb00 at pc 0xf76760b5 bp 0xffc1dfb8 sp 0xffc1dfa8\nREAD of size 8 at 0xf512eb00 thread T0\n #0 0xf76760b4 in ReadPSDChannelRLE coders/psd.c:1141\n```",
"id": "GHSA-273h-m46v-96q4",
"modified": "2026-11-03T17:56:11.972994704Z",
"published": "2026-02-25T15:20:15Z",
"references": [
{
"type": "WEB",
"url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25984"
},
{
"type": "WEB",
"url": "https://github.com/ImageMagick/ImageMagick/commit/5b91ab69af614024255fd93dcc9a62b41fbc435c"
},
{
"type": "PACKAGE",
"url": "https://github.com/ImageMagick/ImageMagick"
},
{
"type": "WEB",
"url": "https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3"
}
],
"schema_version": "1.9.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
}
],
"summary": "ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds"
}