Executive brief
ImageMagick, a widely used suite for editing and converting digital images, contains a vulnerability in how it handles certain multi-frame image files. An attacker could provide a specially crafted image with an oversized color palette to cause a system crash or potentially execute unauthorized code. This could lead to service disruptions or unauthorized access to data on systems that process user-uploaded images.
Technical details
A stack-based buffer overflow (CWE-121) exists in the ImageMagick MNG encoder. The vulnerability is caused by an incomplete fix for a previous issue, where the encoder fails to properly validate the size of palettes in multi-frame images. A local attacker can exploit this by providing a malicious image file, potentially leading to arbitrary code execution or a denial-of-service (DoS) condition. The vulnerability is addressed in Magick.NET version 14.12.0.
Affected products
- ImageMagick Magick.NET-Q16-AnyCPU < 14.12.0
- ImageMagick Magick.NET-Q16-HDRI-AnyCPU < 14.12.0
- ImageMagick Magick.NET-Q16-HDRI-OpenMP-arm64 < 14.12.0
- ImageMagick Magick.NET-Q16-HDRI-OpenMP-x64 < 14.12.0
- ImageMagick Magick.NET-Q16-HDRI-arm64 < 14.12.0
- ImageMagick Magick.NET-Q16-HDRI-x64 < 14.12.0
- ImageMagick Magick.NET-Q16-HDRI-x86 < 14.12.0
- ImageMagick Magick.NET-Q16-OpenMP-arm64 < 14.12.0
- ImageMagick Magick.NET-Q16-OpenMP-x64 < 14.12.0
- ImageMagick Magick.NET-Q16-arm64 < 14.12.0
- ImageMagick Magick.NET-Q16-x64 < 14.12.0
- ImageMagick Magick.NET-Q16-x86 < 14.12.0
- ImageMagick Magick.NET-Q8-AnyCPU < 14.12.0
- ImageMagick Magick.NET-Q8-OpenMP-arm64 < 14.12.0
- ImageMagick Magick.NET-Q8-OpenMP-x64 < 14.12.0
- ImageMagick Magick.NET-Q8-arm64 < 14.12.0
- ImageMagick Magick.NET-Q8-x64 < 14.12.0
- ImageMagick Magick.NET-Q8-x86 < 14.12.0
Timeline
- 2026-04-13: disclosed
- 2026-04-14: advisory
- 2026-04-14: patched