{"schema":"threatline.record/2","record":{"id":"CVE-2026-56376","aliases":["GHSA-2gq3-ww97-wfjm"],"summary":"ImageMagick has a possible heap Use After Free vulnerability in its meta coder","details":"A heap Use After Free vulnerability exists in the meta coder when an allocation fails and a single byte is written to a stale pointer.\n\n```\n==535852==ERROR: AddressSanitizer: heap-use-after-free on address 0x5210000088ff at pc 0x5581bacac14d bp 0x7ffdf667edf0 sp 0x7ffdf667ede0\nWRITE of size 1 at 0x5210000088ff thread T0\n```","categories":["Libraries & packages"],"product":"Magick.NET-Q16-AnyCPU","vendor":"ImageMagick","ecosystem":"nuget","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x86"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-AnyCPU"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-arm64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x64"},"range":"< 14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x86"},"range":"< 14.10.3"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56376","source_modified_at":"2026-06-23T13:06:10.787Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ImageMagick","vendor":"ImageMagick","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"7.1.2-15"},{"version":"7.1.2-15","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56376","source_modified_at":"2026-06-23T13:06:10.787Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"ImageMagick","vendor":"ImageMagick","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"6.9.13-40"},{"version":"6.9.13-40","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-AnyCPU","purl":"pkg:nuget/Magick.NET-Q16-AnyCPU"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-AnyCPU","purl":"pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-OpenMP-arm64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-OpenMP-x64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-arm64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-arm64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-x64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-x86","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x86"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.9.101","6.8.9.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-OpenMP-arm64","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-arm64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-OpenMP-x64","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-OpenMP-x86","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x86"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-arm64","purl":"pkg:nuget/Magick.NET-Q16-arm64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-AnyCPU","purl":"pkg:nuget/Magick.NET-Q8-AnyCPU"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.8.1001","6.8.9.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-OpenMP-arm64","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-arm64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-OpenMP-x64","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-x64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","7.14.0","7.14.0.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-arm64","purl":"pkg:nuget/Magick.NET-Q8-arm64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","8.6.0","8.6.1"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-x64","purl":"pkg:nuget/Magick.NET-Q8-x64"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-x86","purl":"pkg:nuget/Magick.NET-Q8-x86"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"14.10.3"}],"type":"ECOSYSTEM"}],"versions":["10.0.0","10.1.0","11.0.0","11.1.0","11.1.1","11.1.2","11.2.0","11.2.1","11.3.0","12.0.0","12.0.1","12.1.0","12.2.0","12.2.1","12.2.2","12.3.0","13.0.0","13.0.1","13.1.0","13.1.1","13.1.2","13.1.3","13.10.0","13.2.0","13.3.0","13.4.0","13.5.0","13.6.0","13.7.0","13.8.0","13.9.0","13.9.1","14.0.0","14.1.0","14.10.0","14.10.1","14.10.2","14.2.0","14.3.0","14.4.0","14.5.0","14.6.0","14.7.0","14.8.0","14.8.1","14.8.2","14.9.0","14.9.1","6.8.5.1001","6.8.5.401"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-HDRI-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-OpenMP-x86"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q16-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-AnyCPU"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-OpenMP-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-arm64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x64"},"version":"14.10.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:04:21Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"nuget","name":"Magick.NET-Q8-x86"},"version":"14.10.3"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56376","source_modified_at":"2026-06-23T13:06:10.787Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"ImageMagick","ecosystem":null},"version":"7.1.2-15","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-56376","source_modified_at":"2026-06-23T13:06:10.787Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"ImageMagick","ecosystem":null},"version":"6.9.13-40","basis":"first unaffected version stated in the CVE record"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-AnyCPU","purl":"pkg:nuget/Magick.NET-Q16-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-AnyCPU","purl":"pkg:nuget/Magick.NET-Q16-HDRI-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-OpenMP-arm64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-OpenMP-x64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-arm64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-x64","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-HDRI-x86","purl":"pkg:nuget/Magick.NET-Q16-HDRI-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-OpenMP-arm64","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-OpenMP-x64","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-OpenMP-x86","purl":"pkg:nuget/Magick.NET-Q16-OpenMP-x86"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q16-arm64","purl":"pkg:nuget/Magick.NET-Q16-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-AnyCPU","purl":"pkg:nuget/Magick.NET-Q8-AnyCPU"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-OpenMP-arm64","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-OpenMP-x64","purl":"pkg:nuget/Magick.NET-Q8-OpenMP-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-arm64","purl":"pkg:nuget/Magick.NET-Q8-arm64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-x64","purl":"pkg:nuget/Magick.NET-Q8-x64"},"version":"14.10.3"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","source_modified_at":"2026-09-24T20:15:10.544403480Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"NuGet","name":"Magick.NET-Q8-x86","purl":"pkg:nuget/Magick.NET-Q8-x86"},"version":"14.10.3"}],"cvss":3.7,"severity":"Low","kev":{"listed":false},"epss":{"probability":0.0032,"percentile":0.23755,"score_date":"2026-10-23"},"published_at":"2026-06-23T12:13:04.795Z","modified_at":"2026-09-24T20:15:10.544403480Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-24T20:04:21Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-56376","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-06-23T13:06:10.787Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-2gq3-ww97-wfjm","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-24T20:15:10.544403480Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-56376","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2gq3-ww97-wfjm","tags":["vendor-advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/f5049954f12c6fcf090a776767526d2a4708d58b","source":"GitHub Advisory Database"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56376","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/imagemagick-heap-use-after-free-in-meta-coder","tags":["third-party-advisory"]},{"url":"https://github.com/advisories/GHSA-2gq3-ww97-wfjm","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-06-23T13:06:03.212009Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-24T20:15:10.544403480Z","content_hash":"67bd78bde9e2e2573f97e6e5e47120f91f3498fce1a20f839e0078faa19b58e7"}}