VYPR
← All advisories
Medium severity5.3GHSA Advisory· Published Jun 10, 2026· Updated Jun 11, 2026

CVE-2026-45664

CVE-2026-45664

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use. This issue has been patched in versions 6.9.13-47 and 7.1.2-22.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
Magick.NET-Q16-AnyCPUNuGet
< 14.13.114.13.1
Magick.NET-Q16-HDRI-AnyCPUNuGet
< 14.13.114.13.1
Magick.NET-Q16-HDRI-OpenMP-arm64NuGet
< 14.13.114.13.1
Magick.NET-Q16-HDRI-OpenMP-x64NuGet
< 14.13.114.13.1
Magick.NET-Q16-HDRI-arm64NuGet
< 14.13.114.13.1
Magick.NET-Q16-HDRI-x64NuGet
< 14.13.114.13.1
Magick.NET-Q16-HDRI-x86NuGet
< 14.13.114.13.1
Magick.NET-Q16-OpenMP-arm64NuGet
< 14.13.114.13.1
Magick.NET-Q16-OpenMP-x64NuGet
< 14.13.114.13.1
Magick.NET-Q16-arm64NuGet
< 14.13.114.13.1
Magick.NET-Q16-x64NuGet
< 14.13.114.13.1
Magick.NET-Q16-x86NuGet
< 14.13.114.13.1
Magick.NET-Q8-AnyCPUNuGet
< 14.13.114.13.1
Magick.NET-Q8-OpenMP-arm64NuGet
< 14.13.114.13.1
Magick.NET-Q8-OpenMP-x64NuGet
< 14.13.114.13.1
Magick.NET-Q8-arm64NuGet
< 14.13.114.13.1
Magick.NET-Q8-x64NuGet
< 14.13.114.13.1
Magick.NET-Q8-x86NuGet
< 14.13.114.13.1

Affected products

32

Patches

Vulnerability mechanics

References

3

News mentions

2