{"id":"CVE-2026-56374","aliases":["DEBIAN-CVE-2026-56374","EUVD-2026-42260","GHSA-g4x5-mww6-m42x","GHSA-w54j-7wpm-crhj","JLSEC-2026-1055","ROOT-OS-DEBIAN-13-CVE-2026-56374","SUSE-SU-2026:22620-1","SUSE-SU-2026:2877-1","SUSE-SU-2026:3023-1","UBUNTU-CVE-2026-56374","openSUSE-SU-2026:11228-1","openSUSE-SU-2026:21291-1"],"status":"published","title":"ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","severity":{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00223,"percentile":0.13046,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-04-14T23:31:31Z","modified":"2026-10-28T02:30:37Z","fixes":[{"ecosystem":"NuGet","package":"Magick.NET-Q16-AnyCPU","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-AnyCPU","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-OpenMP-arm64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-arm64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x86","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-OpenMP-arm64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-OpenMP-x64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-arm64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-x64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-x86","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-OpenMP-x64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-AnyCPU","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-OpenMP-arm64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-OpenMP-x64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-arm64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-x64","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Magick.NET-Q8-x86","fixed_in":["14.12.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:7.1.1.43+dfsg1-1+deb13u12"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:7.1.2.19+dfsg1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.2023+0"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-OpenMP-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-OpenMP-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-OpenMP-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-OpenMP-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-OpenMP-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-OpenMP-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Magick.NET-Q8-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.1.43+dfsg1-1+deb13u12"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.43+dfsg1-1+deb13u1","8:7.1.1.43+dfsg1-1+deb13u10","8:7.1.1.43+dfsg1-1+deb13u11","8:7.1.1.43+dfsg1-1+deb13u2","8:7.1.1.43+dfsg1-1+deb13u3","8:7.1.1.43+dfsg1-1+deb13u4","8:7.1.1.43+dfsg1-1+deb13u5","8:7.1.1.43+dfsg1-1+deb13u6","8:7.1.1.43+dfsg1-1+deb13u7","8:7.1.1.43+dfsg1-1+deb13u8","8:7.1.1.43+dfsg1-1+deb13u9"]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.19+dfsg1-1"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.46+dfsg1-1","8:7.1.1.47+dfsg1-1","8:7.1.1.47+dfsg1-2","8:7.1.2.1+dfsg1-1","8:7.1.2.12+dfsg1-1","8:7.1.2.13+dfsg1-1","8:7.1.2.15+dfsg1-1","8:7.1.2.15+dfsg1-2","8:7.1.2.16+dfsg1-1","8:7.1.2.18+dfsg1-1","8:7.1.2.3+dfsg1-1","8:7.1.2.7+dfsg1-1","8:7.1.2.8+dfsg1-1"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-OpenMP-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-OpenMP-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-OpenMP-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401","6.8.5.402","6.8.6.301","6.8.6.601","6.8.6.801","6.8.7.1","6.8.7.101","6.8.7.501","6.8.7.502","6.8.7.901","6.8.8.1001","6.8.8.201","6.8.8.501","6.8.8.701","6.8.8.801","6.8.8.901","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401","6.8.5.402","6.8.6.301","6.8.6.601","6.8.6.801","6.8.7.1","6.8.7.101","6.8.7.501","6.8.7.502","6.8.7.901","6.8.8.1001","6.8.8.201","6.8.8.501","6.8.8.701","6.8.8.801","6.8.8.901","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q16-HDRI-OpenMP-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-AnyCPU","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-OpenMP-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-OpenMP-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-arm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401","6.8.5.402","6.8.6.301","6.8.6.601","6.8.6.801","6.8.7.1","6.8.7.101","6.8.7.501","6.8.7.502","6.8.7.901","6.8.8.1001","6.8.8.201","6.8.8.501","6.8.8.701","6.8.8.801","6.8.8.901","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"NuGet","package":"Magick.NET-Q8-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.12.0"}]}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.10.3","14.10.4","14.11.0","14.11.1","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401","6.8.5.402","6.8.6.301","6.8.6.601","6.8.6.801","6.8.7.1","6.8.7.101","6.8.7.501","6.8.7.502","6.8.7.901","6.8.8.1001","6.8.8.201","6.8.8.501","6.8.8.701","6.8.8.801","6.8.8.901","6.8.9.1","6.8.9.101","6.8.9.2","6.8.9.401","6.8.9.501","6.8.9.601","7.0.0.1","7.0.0.10","7.0.0.101","7.0.0.102","7.0.0.103","7.0.0.104","7.0.0.11","7.0.0.12","7.0.0.13","7.0.0.14","7.0.0.15","7.0.0.16","7.0.0.17","7.0.0.18","7.0.0.19","7.0.0.2","7.0.0.20","7.0.0.21","7.0.0.22","7.0.0.3","7.0.0.4","7.0.0.5","7.0.0.6","7.0.0.7","7.0.0.8","7.0.0.9","7.0.1","7.0.1.100","7.0.1.101","7.0.1.500","7.0.2.100","7.0.2.400","7.0.2.600","7.0.2.900","7.0.2.901","7.0.2.902","7.0.3","7.0.3.1","7.0.3.300","7.0.3.500","7.0.3.501","7.0.3.502","7.0.3.901","7.0.3.902","7.0.4.100","7.0.4.400","7.0.4.700","7.0.4.701","7.0.5.500","7.0.5.501","7.0.5.502","7.0.5.800","7.0.5.900","7.0.6","7.0.6.100","7.0.6.1000","7.0.6.1001","7.0.6.1002","7.0.6.101","7.0.6.102","7.0.6.600","7.0.6.601","7.0.7","7.0.7.300","7.0.7.700","7.0.7.900","7.1.0","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.12.0","7.13.0","7.13.1","7.14.0","7.14.0.1","7.14.0.2","7.14.0.3","7.14.1","7.14.2","7.14.3","7.14.4","7.14.5","7.15.0","7.15.0.1","7.15.1","7.15.2","7.15.3","7.15.4","7.15.5","7.16.0","7.16.1","7.17.0","7.17.0.1","7.18.0","7.19.0","7.19.0.1","7.2.0","7.2.1","7.20.0","7.20.0.1","7.21.0","7.21.1","7.22.0","7.22.1","7.22.2","7.22.2.1","7.22.2.2","7.22.3","7.23.0","7.23.1","7.23.2","7.23.2.1","7.23.3","7.23.4","7.24.0","7.24.1","7.3.0","7.4.0","7.4.1","7.4.2","7.4.3","7.4.4","7.4.5","7.4.6","7.5.0","7.5.0.1","7.6.0","7.6.0.1","7.7.0","7.8.0","7.9.0","7.9.0.1","7.9.0.2","7.9.1","7.9.2","8.0.0","8.0.1","8.1.0","8.2.0","8.2.1","8.3.0","8.3.1","8.3.2","8.3.3","8.4.0","8.5.0","8.6.0","8.6.1","9.0.0","9.1.0","9.1.1","9.1.2"]},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.2023+0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.0-160000.11.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.0-160000.11.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.43-150700.3.65.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.43-150700.3.65.1"}]}],"bundled":42},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.21-150600.3.73.1"}]}],"bundled":41},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.21-150600.3.73.1"}]}],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.43+dfsg1-1ubuntu1","8:7.1.1.43+dfsg1-1ubuntu2","8:7.1.2.3+dfsg1-1","8:7.1.2.3+dfsg1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.2.3+dfsg1-1","8:7.1.2.8+dfsg1-1","8:7.1.2.12+dfsg1-1","8:7.1.2.13+dfsg1-1","8:7.1.2.15+dfsg1-1","8:7.1.2.16+dfsg1-1","8:7.1.2.18+dfsg1-1","8:7.1.2.18+dfsg1-1ubuntu0.1~esm1","8:7.1.2.18+dfsg1-1ubuntu0.1~esm2","8:7.1.2.18+dfsg1-1ubuntu0.1~esm3","8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.27-1.1"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.0-160000.11.1"}]}],"bundled":10}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w54j-7wpm-crhj","tags":["vendor-advisory","Vendor Advisory","advisory","web","report"]},{"url":"https://www.vulncheck.com/advisories/imagemagick-heap-buffer-overflow-in-ftxt-encoder-via-format-parameter","tags":["third-party-advisory","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56374","tags":["advisory","web"]},{"url":"https://github.com/advisories/GHSA-g4x5-mww6-m42x","tags":["web"]},{"url":"https://github.com/advisories/GHSA-w54j-7wpm-crhj"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56374.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-56374","tags":["advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622620-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268640","tags":["report"]},{"url":"https://bugzilla.suse.com/1268878","tags":["report"]},{"url":"https://bugzilla.suse.com/1270001","tags":["report"]},{"url":"https://bugzilla.suse.com/1270002","tags":["report"]},{"url":"https://bugzilla.suse.com/1270003","tags":["report"]},{"url":"https://bugzilla.suse.com/1270073","tags":["report"]},{"url":"https://bugzilla.suse.com/1270074","tags":["report"]},{"url":"https://bugzilla.suse.com/1270077","tags":["report"]},{"url":"https://bugzilla.suse.com/1270079","tags":["report"]},{"url":"https://bugzilla.suse.com/1270080","tags":["report"]},{"url":"https://bugzilla.suse.com/1271099","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56379","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262877-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1265048","tags":["report"]},{"url":"https://bugzilla.suse.com/1268092","tags":["report"]},{"url":"https://bugzilla.suse.com/1268094","tags":["report"]},{"url":"https://bugzilla.suse.com/1268095","tags":["report"]},{"url":"https://bugzilla.suse.com/1268096","tags":["report"]},{"url":"https://bugzilla.suse.com/1268101","tags":["report"]},{"url":"https://bugzilla.suse.com/1268102","tags":["report"]},{"url":"https://bugzilla.suse.com/1268103","tags":["report"]},{"url":"https://bugzilla.suse.com/1268105","tags":["report"]},{"url":"https://bugzilla.suse.com/1268107","tags":["report"]},{"url":"https://bugzilla.suse.com/1268108","tags":["report"]},{"url":"https://bugzilla.suse.com/1268110","tags":["report"]},{"url":"https://bugzilla.suse.com/1268111","tags":["report"]},{"url":"https://bugzilla.suse.com/1268112","tags":["report"]},{"url":"https://bugzilla.suse.com/1268113","tags":["report"]},{"url":"https://bugzilla.suse.com/1268114","tags":["report"]},{"url":"https://bugzilla.suse.com/1268116","tags":["report"]},{"url":"https://bugzilla.suse.com/1268117","tags":["report"]},{"url":"https://bugzilla.suse.com/1268120","tags":["report"]},{"url":"https://bugzilla.suse.com/1268121","tags":["report"]},{"url":"https://bugzilla.suse.com/1268122","tags":["report"]},{"url":"https://bugzilla.suse.com/1268123","tags":["report"]},{"url":"https://bugzilla.suse.com/1268124","tags":["report"]},{"url":"https://bugzilla.suse.com/1268125","tags":["report"]},{"url":"https://bugzilla.suse.com/1268126","tags":["report"]},{"url":"https://bugzilla.suse.com/1268645","tags":["report"]},{"url":"https://bugzilla.suse.com/1268879","tags":["report"]},{"url":"https://bugzilla.suse.com/1268880","tags":["report"]},{"url":"https://bugzilla.suse.com/1269063","tags":["report"]},{"url":"https://bugzilla.suse.com/1269064","tags":["report"]},{"url":"https://bugzilla.suse.com/1270004","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-40169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-45664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46523","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-47166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-48994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56376","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263023-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-56374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56374","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-55628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56377","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-56374","title":"ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T13:49:04.868Z","modified":"2026-07-08T15:46:51.394Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T13:36:51.6229Z"}],"euvd":[{"id":"EUVD-2026-42260","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T13:49:04Z","modified":"2026-07-08T15:46:51Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T18:20:10.578977Z"}],"ghsa":[{"id":"GHSA-g4x5-mww6-m42x","title":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due...","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T15:32:01Z","modified":"2026-07-08T15:32:07Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:09:20.268554Z"},{"id":"GHSA-w54j-7wpm-crhj","title":"ImageMagick has a heap-buffer-overflow in FTXT encoder","description":"The FTXT encoder lacks a boundary check when parsing `ftxt:format`, resulting in an out of bounds read.\n\n```\n==3040863==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5020000085b2 at pc 0x606c1ee0c6ce bp 0x7ffee30d6150 sp 0x7ffee30d6148\nREAD of size 1 at 0x5020000085b2 thread T0\n```","status":"published","published":"2026-04-14T23:31:31Z","modified":"2026-04-16T15:48:07Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:39:54.128054Z"}],"nvd":[{"id":"CVE-2026-56374","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T14:17:17.037Z","modified":"2026-10-25T20:10:00.147Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:12:28.040501Z"}],"osv":[{"id":"CVE-2026-56374","title":"ImageMagick - Heap Buffer Overflow in FTXT Encoder via format Parameter","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T13:49:04.868Z","modified":"2026-10-28T02:30:37.787394223Z","cvss":[{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:45:11.609219Z"},{"id":"DEBIAN-CVE-2026-56374","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T14:17:17.037Z","modified":"2026-10-26T11:47:31.774223572Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:57.590991Z"},{"id":"GHSA-w54j-7wpm-crhj","title":"ImageMagick has a heap-buffer-overflow in FTXT encoder","description":"The FTXT encoder lacks a boundary check when parsing `ftxt:format`, resulting in an out of bounds read.\n\n```\n==3040863==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5020000085b2 at pc 0x606c1ee0c6ce bp 0x7ffee30d6150 sp 0x7ffee30d6148\nREAD of size 1 at 0x5020000085b2 thread T0\n```","status":"published","published":"2026-04-14T23:31:31Z","modified":"2026-07-09T04:11:41.287605343Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:46:58.04805Z"},{"id":"JLSEC-2026-1055","title":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due...","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:35:36.041747662Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"},{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"UBUNTU-CVE-2026-56374","description":"ImageMagick before 7.1.2-19 contains a heap buffer overflow vulnerability in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out of bounds read by crafting malicious FTXT image files to cause denial of service or information disclosure.","status":"published","published":"2026-07-08T14:17:00Z","modified":"2026-10-01T00:21:34.608907762Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","level":"high"},{"version":"4.0","score":4.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T16:56:41.382716Z"},{"id":"openSUSE-SU-2026:11228-1","title":"ImageMagick-7.1.2.27-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-7.1.2.27-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-07-10T10:00:09.156333363Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21291-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues\n\n- CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read\n  (bsc#1270073).\n- CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure\n  (bsc#1270074).\n- CVE-2026-55594: missing depth check in the MVG decoder will result in a stack overflow when a crafted image is\n  provided (bsc#1270077).\n- CVE-2026-55595: providing invalid arguments to the `connected-components` option can lead to an infinite loop\n  (bsc#1270079).\n- CVE-2026-55597: incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder (bsc#1270080).\n- CVE-2026-56361: off-by-one error in morphology validation can lead to an out-of-bounds read (bsc#1270001).\n- CVE-2026-56363: integer overflow leading to a division by zero in binomial kernel processing can cause an application\n  crash (bsc#1270002).\n- CVE-2026-56364: memory leak in `LoadOpenCLDeviceBenchmark` function when parsing malformed OpenCL device profile XML\n  files\n  with unclosed device elements (bsc#1270003).\n- CVE-2026-56374: missing boundary checks can lead to a heap buffer overflow in the FTXT encoder when parsing\n  `ftxt:format` (bsc#1271099).\n- CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG\n  files (bsc#1268878).\n- GHSA-3j4x-rwrx-xxj9: possible use-after-free write in PDB decoder (bsc#1268640).\n","status":"published","published":"2026-07-10T08:53:04Z","modified":"2026-07-13T18:24:57.254070201Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-56374","title":"CVE-2026-56374 in imagemagick - Patched by Root","description":"Root has patched CVE-2026-56374 in the imagemagick package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-09-17T13:27:24Z","modified":"2026-09-24T14:00:04.977636912Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"SUSE-SU-2026:22620-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues\n\n- CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read\n  (bsc#1270073).\n- CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure\n  (bsc#1270074).\n- CVE-2026-55594: missing depth check in the MVG decoder will result in a stack overflow when a crafted image is\n  provided (bsc#1270077).\n- CVE-2026-55595: providing invalid arguments to the `connected-components` option can lead to an infinite loop\n  (bsc#1270079).\n- CVE-2026-55597: incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder (bsc#1270080).\n- CVE-2026-56361: off-by-one error in morphology validation can lead to an out-of-bounds read (bsc#1270001).\n- CVE-2026-56363: integer overflow leading to a division by zero in binomial kernel processing can cause an application\n  crash (bsc#1270002).\n- CVE-2026-56364: memory leak in `LoadOpenCLDeviceBenchmark` function when parsing malformed OpenCL device profile XML\n  files\n  with unclosed device elements (bsc#1270003).\n- CVE-2026-56374: missing boundary checks can lead to a heap buffer overflow in the FTXT encoder when parsing\n  `ftxt:format` (bsc#1271099).\n- CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG\n  files (bsc#1268878).\n- GHSA-3j4x-rwrx-xxj9: possible use-after-free write in PDB decoder (bsc#1268640).\n","status":"published","published":"2026-07-10T08:49:59Z","modified":"2026-07-17T18:24:02.464889385Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2877-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read\n  (bsc#1270073).\n- CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure\n  (bsc#1270074).\n- CVE-2026-55594: missing depth check in the MVG decoder will result in a stack overflow when a crafted image is\n  provided (bsc#1270077).\n- CVE-2026-55595: providing invalid arguments to the `connected-components` option can lead to an infinite loop\n  (bsc#1270079).\n- CVE-2026-55597: incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder (bsc#1270080).\n- CVE-2026-56361: off-by-one error in morphology validation can lead to an out-of-bounds read (bsc#1270001).\n- CVE-2026-56363: integer overflow leading to a division by zero in binomial kernel processing can cause an application\n  crash (bsc#1270002).\n- CVE-2026-56364: memory leak in `LoadOpenCLDeviceBenchmark` function when parsing malformed OpenCL device profile XML\n  files with unclosed device elements (bsc#1270003).\n- CVE-2026-56374: missing boundary checks can lead to a heap buffer overflow in the FTXT encoder when parsing\n  `ftxt:format` (bsc#1271099).\n- CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG\n  files (bsc#1268878).\n- CVE-2026-42050: stack buffer overflow via a malicious MIFF file (bsc#1265048).\n- CVE-2026-42326: out-of-bounds read of single byte via malicious IPTC file (bsc#1268092).\n- CVE-2026-45031: missing check in the PSD decoder allows bypass of the list-length resource policy when decoding a PSD\n  image (bsc#1268094).\n- CVE-2026-45358: off-by-one error in the meta encoder can lead to an out-of-bounds read of a single byte\n  (bsc#1268102).\n- CVE-2026-45359: heap buffer overread via invalid `connected-components` value (bsc#1268095).\n- CVE-2026-45624: performing a polynomial distortion can lead to an out-of-bounds over-read of 24 bytes (bsc#1268096).\n- CVE-2026-45664: missing check in the MNG coder can lead to excessive resource use and a DoS (bsc#1268101).\n- CVE-2026-46520: out-of-bounds write when processing multiple images with different dimensions (bsc#1268112).\n- CVE-2026-46521: missing check when using LZMA compression in the MIFF encoder can lead to an out-of-bounds write\n  (bsc#1268124).\n- CVE-2026-46522: missing check in the MIFF decoder can lead to a denial of service via crafted MIFF file (bsc#1268126).\n- CVE-2026-46523: heap use-after-free via a crafted MSL image (bsc#1268125).\n- CVE-2026-46557: missing depth check can lead to a stack buffer overflow in the fx operation when processing a crafted\n  argument (bsc#1268123).\n- CVE-2026-46559: incorrect check in the JP2 can lead to a heap buffer overwrite of a single byte when specifying\n  certain options (bsc#1268121).\n- CVE-2026-46692: heap buffer overwrite in the server process via an attacker who can connect to a magick -distribute-\n  cache service (bsc#1268120).\n- CVE-2026-46693: file descriptor hijacking in the server process when a race condition is met via an attacker who can\n  connect to a magick -distribute-cache service (bsc#1268117).\n- CVE-2026-47165: distributed pixel cache was designed to operate without a challenge-response authentication model\n  (bsc#1268114).\n- CVE-2026-47166: heap buffer overread in the server process via an attacker who can connect to a magick -distribute-\n  cache service (bsc#1268113).\n- CVE-2026-48724: heap buffer underwrite in the Floyd-Steinberg depth dithering (bsc#1268116).\n- CVE-2026-48734: missing depth or visited-set check can lead to a stack buffer overflow in the MVG decoder\n  (bsc#1268122).\n- CVE-2026-48994: missing check of a return value in the MAT decoder can lead to a heap buffer overwrite on 32-bit\n  systems (bsc#1268111).\n- CVE-2026-49218: missing check in the DCM decoder can lead to a DoS (bsc#1268110).\n- CVE-2026-53460: missing check for maximum memory request in `AcquireAlignedMemory` can lead to an OOM condition\n  (bsc#1268108).\n- CVE-2026-53461: incorrect loop in the ICON decoder can lead to an out-of-bounds heap write (bsc#1268107).\n- CVE-2026-53463: passing incorrect arguments in the distort operation can lead to NULL pointer dereference\n  (bsc#1268105).\n- CVE-2026-53464: providing invalid options to the wand option parser can lead to a memory leak (bsc#1268103).\n- CVE-2026-56367: integer overflow in the PSB (PSD v2) RLE decoding path can lead to an heap out-of-bounds read\n  (bsc#1268645).\n- CVE-2026-56368: improper memory management can lead to memory leak in multiple coders that write raw pixel data\n  (bsc#1269064).\n- CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing `connected-components:*`\n  artifacts with invalid indices (bsc#1269063).\n- CVE-2026-56371: memory leak in `coders/txt.c` when processing TXT files with texture attributes (bsc#1268879).\n- CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files\n  (bsc#1268880).\n- GHSA-3j4x-rwrx-xxj9: possible use-after-free write in PDB decoder (bsc#1268640).\n","status":"published","published":"2026-07-13T09:26:26Z","modified":"2026-07-14T09:15:07.650480359Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3023-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues\n\n- CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).\n- CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092).\n- CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder (bsc#1268094).\n- CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta\n  encoder (bsc#1268102).\n- CVE-2026-45359: information Disclosure via Invalid Connected-Components Value (bsc#1268095).\n- CVE-2026-45624: data exposure due to image processing vulnerability (bsc#1268096).\n- CVE-2026-45664: denial of Service due to excessive resource use in MNG coder (bsc#1268101).\n- CVE-2026-46520: denial of Service via out-of-bounds write when processing multiple images (bsc#1268112).\n- CVE-2026-46521: out of bounds write can occur due to a missing check when using LZMA compression in the MIFF encoder\n  (bsc#1268124).\n- CVE-2026-46522: denial of service via crafted MIFF file due to a missing check in the MIFF decoder (bsc#1268126).\n- CVE-2026-46523: heap-use-after-free via a crafted MSL image (bsc#1268125).\n- CVE-2026-46557: stack overflow can occur in the fx operation by passing a crafted argument due to a missing depth\n  check (bsc#1268123).\n- CVE-2026-46559: heap buffer over-write of a single byte when specifying certain options due to n incorrect check in\n  the JP2 (bsc#1268121).\n- CVE-2026-46692: heap buffer over-write in the server process via an attacker who can connect to a magick -distribute-\n  cache service (bsc#1268120).\n- CVE-2026-46693: file descriptor hijacking in the server process when a race condition is met via an attacker who can\n  connect to a magick -distribute-cache service (bsc#1268117).\n- CVE-2026-47165: distributed pixel cache was originally designed to operate without a challenge--response\n  authentication model (bsc#1268114).\n- CVE-2026-47166: heap buffer over-read in the server process via an attacker who can connect to a magick -distribute-\n  cache service (bsc#1268113).\n- CVE-2026-48734: Stack Overflow in MVG decoder (bsc#1268122).\n- CVE-2026-48994: heap buffer over-write due to a missing check of a return value in the MAT decoder on 32-bit systems\n  (bsc#1268111).\n- CVE-2026-49218: denial of service due to a missing check in the DCM decoder (bsc#1268110).\n- CVE-2026-53460: out-of-Memory condition due to a missing check for maximum memory request in AcquireAlignedMemory\n  (bsc#1268108).\n- CVE-2026-53461: out of bounds heap write due to an incorrect loop in the ICON decoder (bsc#1268107).\n- CVE-2026-53463: null pointer deference due to passing incorrect arguments in the distort operation (bsc#1268105).\n- CVE-2026-53464: small memory leak due to providing invalid options to the wand option parser (bsc#1268103).\n- CVE-2026-53466: heap Buffer Over-Read in XCF decoder due to integer conversion overflow (bsc#1270073).\n- CVE-2026-53467: information Disclosure in MNG decoder because allocated memory is left unchanged (bsc#1270074).\n- CVE-2026-55594: stack Overflow in MVG decoder due to missing depth check (bsc#1270077).\n- CVE-2026-55595: infinite Loop in connected-components when providing invalid arguments (bsc#1270079).\n- CVE-2026-55597: heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments (bsc#1270080).\n- CVE-2026-56361: off-by-one origin validation in allows out-of-bounds read in morphology processing (bsc#1270001).\n- CVE-2026-56363: division by Zero in binomial kernel (bsc#1270002).\n- CVE-2026-56364: memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML (bsc#1270003).\n- CVE-2026-56365: memory leak in PNG encoder when writing a MNG image (bsc#1270004).\n- CVE-2026-56367: integer overflow in the PSB (PSD v2) RLE decoding path that causes a heap out-of-bounds read\n  (bsc#1268645).\n- CVE-2026-56368: memory leak in multiple coders that write raw pixel data (bsc#1269064).\n- CVE-2026-56370: out-of-bounds access in `ConnectedComponentsImage()` when processing connected-components:* artifacts\n  with invalid indices (bsc#1269063).\n- CVE-2026-56371: memory leak in coders/txt.c when processing TXT files with texture attributes (bsc#1268879).\n- CVE-2026-56374: heap-buffer-overflow in FTXT encoder (bsc#1271099).\n- CVE-2026-56376: heap use-after-free in the meta coder can lead to denial of service via specially crafted image files\n  (bsc#1268880).\n- CVE-2026-56379: arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG\n  files (bsc#1268878).\n- GHSA-3j4x-rwrx-xxj9: possible use-after-free write in PDB decoder (bsc#1268640).\n","status":"published","published":"2026-07-15T09:48:59Z","modified":"2026-07-16T10:00:06.459220806Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}