{"action":"Upgrade Magick.NET-Q8-arm64 to 14.10.3 or later.","affected":[{"fixed":"14.10.3","introduced":"0"}],"component":"Magick.NET-Q8-arm64","cve_ids":["CVE-2026-56378"],"ecosystem":"NuGet","epss":0.00389,"exploited":false,"fixed_versions":["14.10.3"],"ghsa_id":"GHSA-wgxp-q8xq-wpp9","id":"tcs_01M5N93YPA60MADC2N68AD1PC3","modified_at":"2026-07-08T08:27:15.276288680Z","published_at":"2026-02-25T19:12:23Z","references":["https://osv.dev/vulnerability/GHSA-wgxp-q8xq-wpp9","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9","https://github.com/ImageMagick/ImageMagick/commit/436e5d2589e3c0adc10d9aa189e81d5d088d8207","https://github.com/ImageMagick/ImageMagick","https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-wgxp-q8xq-wpp9#NuGet/Magick.NET-Q8-arm64","url":"https://osv.dev/vulnerability/GHSA-wgxp-q8xq-wpp9"}],"summary":"ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS"}