{"action":"Upgrade Magick.NET-Q8-arm64 to 14.15.0 or later.","affected":[{"fixed":"14.15.0","introduced":"0"}],"component":"Magick.NET-Q8-arm64","cve_ids":["CVE-2026-53466"],"ecosystem":"NuGet","exploited":false,"fixed_versions":["14.15.0"],"ghsa_id":"GHSA-pjxj-pchx-4c3m","id":"tcs_01M5N8WRXMH2EKF91VFN9CMPHF","modified_at":"2026-07-31T19:45:23.590427033Z","published_at":"2026-07-31T19:40:08Z","references":["https://osv.dev/vulnerability/GHSA-pjxj-pchx-4c3m","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pjxj-pchx-4c3m","https://nvd.nist.gov/vuln/detail/CVE-2026-53466","https://github.com/ImageMagick/ImageMagick/commit/47ca7210515f3c9ea033b86fe4323a70caa74468","https://github.com/ImageMagick/ImageMagick","https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-26","https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-pjxj-pchx-4c3m#NuGet/Magick.NET-Q8-arm64","url":"https://osv.dev/vulnerability/GHSA-pjxj-pchx-4c3m"}],"summary":"ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow"}