mediumCVSS 6.2Vulnerability

CVE-2026-53465

An crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder.

Properties

severity
medium
summary
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
epss_score
0.00113
cvss_score
6.2
ghsa_published
2026-06-26T23:11:49Z
source_url
https://github.com/advisories/GHSA-44cp-c3ww-9rv5
ghsa_updated
2026-06-26T23:11:50Z
ghsa_id
GHSA-44cp-c3ww-9rv5
cve_id
CVE-2026-53465
cvss_vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
is_ghsa_only
false
epss_percentile
0.01616

Related Entities (38)

ENRICHED_BY (1)

[Source]FIRST EPSS

REPORTED_BY (1)

[Source]GitHub Advisory Database

VULNERABLE_TO (17)

[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q16-HDRI-arm64

AFFECTS (17)

[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64

HAS_WEAKNESS (2)

[Weakness]Out-of-bounds Write
[Weakness]Heap-based Buffer Overflow

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-53465 (CVSS 6.2) — Ninja Signal Threat Intelligence | Ninja Signal