tocsin

CVE-2026-56378

19 advisories.

NuGet/Magick.NET-Q16-AnyCPU CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-AnyCPU to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-HDRI-AnyCPU CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-HDRI-AnyCPU to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-HDRI-OpenMP-arm64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-HDRI-OpenMP-x64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-HDRI-OpenMP-x64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-HDRI-arm64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-HDRI-arm64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-HDRI-x64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-HDRI-x64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-HDRI-x86 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-HDRI-x86 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-OpenMP-arm64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-OpenMP-arm64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-OpenMP-x64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-OpenMP-x64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-OpenMP-x86 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-OpenMP-x86 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-arm64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-arm64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-x64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-x64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q16-x86 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q16-x86 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q8-AnyCPU CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q8-AnyCPU to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q8-OpenMP-arm64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q8-OpenMP-arm64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q8-OpenMP-x64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q8-OpenMP-x64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q8-arm64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q8-arm64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q8-x64 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q8-x64 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON

NuGet/Magick.NET-Q8-x86 CVE-2026-56378: low 3.7

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

Action: Upgrade Magick.NET-Q8-x86 to 14.10.3 or later.

Affected

introducedfixedlast affected
014.10.3-

Fixed versions

14.10.3

Sources

CVE-2026-56378 · published · modified · JSON