GCVE - cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dlemstra:magick.net:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dlemstra (`ba17b7dc-e649-5a58-ae9e-98a33f3ed15c`)
Product	Magick.Net (`63c1f702-abf2-59ac-a731-77f202fbe021`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/dlemstra/magick.net`	purl2cpe	2026-06-01 10:15:35.608072

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-27799`	vulnerable	2026-06-08 07:55:13.904021	ImageMagick has a heap Buffer Over-read in its DJVU image format handler MEDIUM (4) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a patch. Published: 2026-02-25T23:20:25.204Z Updated: 2026-02-26T17:04:08.122Z Open on db.gcve.eu Reference links https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r99p-5442-q2x2 https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-27798`	vulnerable	2026-06-08 07:55:13.903430	ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images MEDIUM (4) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15 and 6.9.13-40 contain a patch. Published: 2026-02-25T23:18:33.174Z Updated: 2026-02-26T16:54:57.532Z Open on db.gcve.eu Reference links https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f https://github.com/ImageMagick/ImageMagick/commit/0377e60b3c0d766bd7271221c95d9ee54f6a3738 https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-25637`	vulnerable	2026-06-08 07:53:20.131277	ImageMagick: Possible memory leak in ASHLAR encoder MEDIUM (5.3) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. Version 7.1.2-15 contains a patch. Published: 2026-02-24T00:48:37.892Z Updated: 2026-06-23T15:47:34.399Z Open on db.gcve.eu Reference links https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm37-qx7w-p258 https://github.com/ImageMagick/ImageMagick/commit/30ce0e8efbd72fd6b50ed3a10ae22f57c8901137 https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-25576`	vulnerable	2026-06-08 07:53:20.042037	ImageMagick: Out of bounds read in multiple coders read raw pixel data MEDIUM (5.1) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larger than -size dimensions, causing out-of-bounds memory reads from a heap-allocated buffer. Versions 7.1.2-15 and 6.9.13-40 contain a patch. Published: 2026-02-24T00:38:34.337Z Updated: 2026-02-26T14:55:10.148Z Open on db.gcve.eu Reference links https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jv4p-gjwq-9r2j https://github.com/ImageMagick/ImageMagick/commit/077b42643212d7da8c1a4f6b2cd0067ebca8ec0f https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-24485`	vulnerable	2026-06-08 07:51:17.748991	ImageMagick: Infinite loop vulnerability when parsing a PCD file HIGH (7.5) ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for the Sync marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service. Versions 7.1.2-15 and 6.9.13-40 contain a patch. Published: 2026-02-24T00:34:04.907Z Updated: 2026-02-26T14:49:07.397Z Open on db.gcve.eu Reference links https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85 https://github.com/ImageMagick/ImageMagick/commit/332c1566acc2de77857032d3c2504ead6210ff50 https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-24484`	vulnerable	2026-06-08 07:51:17.748681	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-23952`	vulnerable	2026-06-08 07:51:16.454027	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Magick.Net

Notes

PURL mappings

Vulnerability references

Contribute