GHSA-8793-7xv6-82cfMediumCVSS 5.1

ImageMagick has an Out-of-bounds Write via InterpretImageFilename

Published
March 26, 2026
Last Modified
April 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-33536 →

📋 Description

Due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds write.

=================================================================
==48558==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x00016b9b7490 at pc 0x0001046d48ac bp 0x00016b9b31d0 sp 0x00016b9b31c8
WRITE of size 1 at 0x00016b9b7490 thread T0

🎯 Affected products17

  • nuget/Magick.NET-Q16-AnyCPU:< 14.11.1
  • nuget/Magick.NET-Q16-HDRI-AnyCPU:< 14.11.1
  • nuget/Magick.NET-Q16-HDRI-OpenMP-arm64:< 14.11.1
  • nuget/Magick.NET-Q16-HDRI-arm64:< 14.11.1
  • nuget/Magick.NET-Q16-HDRI-x64:< 14.11.1
  • nuget/Magick.NET-Q16-HDRI-x86:< 14.11.1
  • nuget/Magick.NET-Q16-OpenMP-arm64:< 14.11.1
  • nuget/Magick.NET-Q16-OpenMP-x64:< 14.11.1
  • nuget/Magick.NET-Q16-OpenMP-x86:< 14.11.1
  • nuget/Magick.NET-Q16-arm64:< 14.11.1
  • nuget/Magick.NET-Q16-x64:< 14.11.1
  • nuget/Magick.NET-Q16-x86:< 14.11.1
  • nuget/Magick.NET-Q8-AnyCPU:< 14.11.1
  • nuget/Magick.NET-Q8-OpenMP-x64:< 14.11.1
  • nuget/Magick.NET-Q8-arm64:< 14.11.1
  • nuget/Magick.NET-Q8-x64:< 14.11.1
  • nuget/Magick.NET-Q8-x86:< 14.11.1

🔗 References (3)