Fluid Attacks Database

Description

ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
nuget	magick.net-q16-hdri-x86	>=0 <14.13.1	14.13.1
nuget	magick.net-q16-openmp-arm64	>=0 <14.13.1	14.13.1
nuget	magick.net-q16-hdri-arm64	>=0 <14.13.1	14.13.1
nuget	magick.net-q16-x64	>=0 <14.13.1	14.13.1
nuget	magick.net-q8-openmp-x64	>=0 <14.13.1	14.13.1
nuget	magick.net-q8-arm64	>=0 <14.13.1	14.13.1
nuget	magick.net-q8-x86	>=0 <14.13.1	14.13.1
nuget	magick.net-q16-hdri-openmp-arm64	>=0 <14.13.1	14.13.1
nuget	magick.net-q8-x64	>=0 <14.13.1	14.13.1
nuget	magick.net-q16-openmp-x64	>=0 <14.13.1	14.13.1

1-10 of 18

Aliases

1. CVE-2026-465212. NVD-2026-465213. OSV-2026-465214. GHSA-jcqp-6r6f-3mfx5. GCVE-2026-46521

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jcqp-6r6f-3mfx

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.