CVE-2026-48994Medium· 5.9▾ SunlitImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
0.2%
A missing check of a return value could lead to a heap buffer over-write in the MAT decoder on 32-bit systems.
Magick.NET-Q16-AnyCPU < 14.14.0Magick.NET-Q16-HDRI-AnyCPU < 14.14.0Magick.NET-Q16-HDRI-OpenMP-arm64 < 14.14.0Magick.NET-Q16-HDRI-arm64 < 14.14.0Magick.NET-Q16-HDRI-x64 < 14.14.0Magick.NET-Q16-HDRI-x86 < 14.14.0Magick.NET-Q16-OpenMP-arm64 < 14.14.0Magick.NET-Q16-OpenMP-x64 < 14.14.0Magick.NET-Q16-arm64 < 14.14.0Magick.NET-Q16-x64 < 14.14.0Magick.NET-Q16-x86 < 14.14.0Magick.NET-Q8-AnyCPU < 14.14.0Magick.NET-Q8-OpenMP-arm64 < 14.14.0Magick.NET-Q8-OpenMP-x64 < 14.14.0Magick.NET-Q8-arm64 < 14.14.0Magick.NET-Q8-x64 < 14.14.0Magick.NET-Q8-x86 < 14.14.0Upgrade to a patched release:
Magick.NET-Q16-AnyCPU 14.14.0Magick.NET-Q16-HDRI-AnyCPU 14.14.0Magick.NET-Q16-HDRI-OpenMP-arm64 14.14.0Magick.NET-Q16-HDRI-arm64 14.14.0Magick.NET-Q16-HDRI-x64 14.14.0Magick.NET-Q16-HDRI-x86 14.14.0Magick.NET-Q16-OpenMP-arm64 14.14.0Magick.NET-Q16-OpenMP-x64 14.14.0Magick.NET-Q16-arm64 14.14.0Magick.NET-Q16-x64 14.14.0Magick.NET-Q16-x86 14.14.0Magick.NET-Q8-AnyCPU 14.14.0Magick.NET-Q8-OpenMP-arm64 14.14.0Magick.NET-Q8-OpenMP-x64 14.14.0Magick.NET-Q8-arm64 14.14.0Magick.NET-Q8-x64 14.14.0Magick.NET-Q8-x86 14.14.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-53465Medium· 6.2ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
GHSA-76q6-2p6h-xjqrLow· 1.8ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title
CVE-2026-53463Medium· 4.3ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments
CVE-2026-53464Medium· 4.0ImageMagick: Memory Leak in wand option parser when providing invalid arguments
CVE-2026-48724Medium· 5.5ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
CVE-2026-48733Medium· 4.7ImageMagick has an Infinite Loop in subimage-search with crafted image