ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

GHSA-56jp-jfqg-f8f4 · CVE-2026-31853

Published Mar 10, 2026 · Modified Mar 19, 2026

Description

An overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images.

References

5.7 / 10

MEDIUM CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Affected Packages

NuGet/Magick.NET-Q16-AnyCPU

Fix 14.10.4

Introduced 0

210 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +190 more

NuGet/Magick.NET-Q16-HDRI-AnyCPU

Fix 14.10.4

Introduced 0

207 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +187 more

NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64

Fix 14.10.4

Introduced 0

55 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +35 more

NuGet/Magick.NET-Q16-HDRI-OpenMP-x64

Fix 14.10.4

Introduced 0

107 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +87 more

NuGet/Magick.NET-Q16-HDRI-arm64

Fix 14.10.4

Introduced 0

55 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +35 more

NuGet/Magick.NET-Q16-HDRI-x64

Fix 14.10.4

Introduced 0

207 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +187 more

NuGet/Magick.NET-Q16-HDRI-x86

Fix 14.10.4

Introduced 0

207 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +187 more

NuGet/Magick.NET-Q16-OpenMP-arm64

Fix 14.10.4

Introduced 0

55 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +35 more

NuGet/Magick.NET-Q16-OpenMP-x64

Fix 14.10.4

Introduced 0

107 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +87 more

NuGet/Magick.NET-Q16-OpenMP-x86

Fix 14.10.4

Introduced 0

NuGet/Magick.NET-Q16-arm64

Fix 14.10.4

Introduced 0

55 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +35 more

NuGet/Magick.NET-Q16-x64

Fix 14.10.4

Introduced 0

226 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +206 more

NuGet/Magick.NET-Q16-x86

Fix 14.10.4

Introduced 0

226 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +206 more

NuGet/Magick.NET-Q8-AnyCPU

Fix 14.10.4

Introduced 0

210 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +190 more

NuGet/Magick.NET-Q8-OpenMP-arm64

Fix 14.10.4

Introduced 0

55 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +35 more

NuGet/Magick.NET-Q8-OpenMP-x64

Fix 14.10.4

Introduced 0

107 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +87 more

NuGet/Magick.NET-Q8-arm64

Fix 14.10.4

Introduced 0

55 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +35 more

NuGet/Magick.NET-Q8-x64

Fix 14.10.4

Introduced 0

226 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +206 more

NuGet/Magick.NET-Q8-x86

Fix 14.10.4

Introduced 0

226 affected versions

10.0.010.1.011.0.011.1.011.1.111.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.1 +206 more

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes