CVE-2026-62946Medium· 5.1▾ SunlitImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds
▾ Sunlit zone — Low / medium · no exploitation signal
impact 28.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
0.1%
When processing an extremely large JNX file on 32-bit platforms an integer overflow will happen that can cause a heap buffer over-write.
Magick.NET-Q16-AnyCPU < 14.15.0Magick.NET-Q16-HDRI-AnyCPU < 14.15.0Magick.NET-Q16-HDRI-x86 < 14.15.0Magick.NET-Q16-x86 < 14.15.0Magick.NET-Q8-AnyCPU < 14.15.0Magick.NET-Q8-x86 < 14.15.0Upgrade to a patched release:
Magick.NET-Q16-AnyCPU 14.15.0Magick.NET-Q16-HDRI-AnyCPU 14.15.0Magick.NET-Q16-HDRI-x86 14.15.0Magick.NET-Q16-x86 14.15.0Magick.NET-Q8-AnyCPU 14.15.0Magick.NET-Q8-x86 14.15.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-53466Medium· 6.5ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
CVE-2026-62343Medium· 4.7ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
GHSA-cvhv-g4rq-3hmwLow· 3.3ImageMagick: Memory Leak when providing invalid options to the cli
GHSA-76q6-2p6h-xjqrLow· 1.8ImageMagick: Heap Buffer Over-Write in X11 import with crafted window title
CVE-2026-62363Medium· 5.0ImageMagick: Heap Buffer Over-Write in fx operation
GHSA-qvxh-prvr-85w2Low· 3.7ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails