Junglewise Threat Intelligence
CVE-2026-32636: ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
CVE-2026-32636 · Severity: low · CVSS 3.1 · Published 2026-03-17
Technologies: Magick.NET-Q16-OpenMP-arm64 (NuGet), Magick.NET-Q16-AnyCPU (NuGet), Magick.NET-Q16-HDRI-AnyCPU (NuGet), Magick.NET-Q8-x86 (NuGet), Magick.NET-Q8-AnyCPU (NuGet), Magick.NET-Q16-arm64 (NuGet), Magick.NET-Q16-OpenMP-x64 (NuGet), Magick.NET-Q16-HDRI-OpenMP-x64 (NuGet), Magick.NET-Q16-OpenMP-x86 (NuGet), Magick.NET-Q16-HDRI-arm64 (NuGet), Magick.NET-Q16-HDRI-x86 (NuGet), Magick.NET-Q16-HDRI-x64 (NuGet), Magick.NET-Q8-OpenMP-arm64 (NuGet), Magick.NET-Q8-OpenMP-x64 (NuGet), Magick.NET-Q16-x64 (NuGet), Magick.NET-Q8-arm64 (NuGet), Magick.NET-Q8-x64 (NuGet), Magick.NET-Q16-x86 (NuGet), Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet). Vendors: NuGet.
Executive brief
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
Affected products
- NuGet Magick.NET-Q16-OpenMP-arm64
- NuGet Magick.NET-Q16-AnyCPU
- NuGet Magick.NET-Q16-HDRI-AnyCPU
- NuGet Magick.NET-Q8-x86
- NuGet Magick.NET-Q8-AnyCPU
- NuGet Magick.NET-Q16-arm64
- NuGet Magick.NET-Q16-OpenMP-x64
- NuGet Magick.NET-Q16-HDRI-OpenMP-x64
- NuGet Magick.NET-Q16-OpenMP-x86
- NuGet Magick.NET-Q16-HDRI-arm64
- NuGet Magick.NET-Q16-HDRI-x86
- NuGet Magick.NET-Q16-HDRI-x64
- NuGet Magick.NET-Q8-OpenMP-arm64
- NuGet Magick.NET-Q8-OpenMP-x64
- NuGet Magick.NET-Q16-x64
- NuGet Magick.NET-Q8-arm64
- NuGet Magick.NET-Q8-x64
- NuGet Magick.NET-Q16-x86
- NuGet Magick.NET-Q16-HDRI-OpenMP-arm64