NuGet/Magick.NET-Q16-AnyCPU CVE-2026-28692: medium 4.8, EPSS 0.26%

ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

Action: Upgrade Magick.NET-Q16-AnyCPU to 14.10.4 or later.

Affected

Fixed versions

Sources

• osv: GHSA-mrmj-x24c-wwcv
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mrmj-x24c-wwcv
• https://nvd.nist.gov/vuln/detail/CVE-2026-28692
• https://github.com/ImageMagick/ImageMagick
• https://github.com/dlemstra/Magick.NET/releases/tag/14.10.4

CVE-2026-28692 · published 2026-03-10T21:02:41Z · modified 2026-03-10T21:26:24.289324Z · JSON