ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

Description

=================================================================
==969652==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x506000003b40 at pc 0x555557b2a926 bp 0x7fffffff4c80 sp 0x7fffffff4c70
READ of size 8 at 0x506000003b40 thread T0

References

• ImageMagick/ImageMagick security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-28692 · ADVISORY
• ImageMagick/ImageMagick · PACKAGE
• dlemstra/Magick.NET release 14.10.4 · WEB

Magick.NET-Q16-AnyCPU 的其他漏洞

• CVE-2026-62946中危 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2…
• CVE-2026-62363中危 5.0ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer …
• CVE-2026-62343中危 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 an…
• CVE-2026-66011低危 3.3ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Att…
• GHSA-hc76-7mpc-qjqh中危 5.7ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797