CVE-2026-25576: ImageMagick: Out of bounds read in multiple coders read raw pixel data
Published Feb 24, 2026
·Updated
A heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larger than -size dimensions, causing out-of-bounds memory reads from a heap-allocated buffer.
Affected Software
18 affected componentsFixes available
ImageMagick ImageMagick<7.1.2-15, <6.9.13-40
nuget/Magick.NET-Q8-x86<14.10.3
14.10.3
nuget/Magick.NET-Q8-OpenMP-arm64<14.10.3
14.10.3
nuget/Magick.NET-Q8-AnyCPU<14.10.3
14.10.3
nuget/Magick.NET-Q16-x86<14.10.3
14.10.3
nuget/Magick.NET-Q16-arm64<14.10.3
14.10.3
nuget/Magick.NET-Q16-OpenMP-x86<14.10.3
14.10.3
nuget/Magick.NET-Q16-OpenMP-x64<14.10.3
14.10.3
nuget/Magick.NET-Q16-OpenMP-arm64<14.10.3
14.10.3
nuget/Magick.NET-Q16-HDRI-x86<14.10.3
14.10.3
nuget/Magick.NET-Q16-HDRI-x64<14.10.3
14.10.3
nuget/Magick.NET-Q16-HDRI-arm64<14.10.3
14.10.3
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64<14.10.3
14.10.3
nuget/Magick.NET-Q16-HDRI-AnyCPU<14.10.3
14.10.3
nuget/Magick.NET-Q16-AnyCPU<14.10.3
14.10.3
ImageMagick ImageMagick<6.9.13-40
ImageMagick ImageMagick>=7.0.0-0<7.1.2-15
Dlemstra Magick.net<14.10.3
Remediation
Event History
Feb 24, 2026
CVE Published
via MITRE·12:38 AM
Data Sourced
via MITRE·12:38 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:16 AM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:29 PM
Data Sourced
via GitHub·03:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-25576?
CVE-2026-25576 has a critical severity due to the potential for out-of-bounds memory reads.
2
How do I fix CVE-2026-25576?
To fix CVE-2026-25576, update ImageMagick to version 14.10.3 or later.
3
Which versions of ImageMagick are affected by CVE-2026-25576?
CVE-2026-25576 affects ImageMagick versions prior to 7.1.2-15 and 6.9.13-40.
4
What types of image formats are vulnerable due to CVE-2026-25576?
CVE-2026-25576 affects multiple raw image format handles in ImageMagick.
5
What can happen if I do not address CVE-2026-25576?
Failing to address CVE-2026-25576 may lead to arbitrary code execution or application crashes.