Live › vulnerability › CVE-2026-56367
A flaw in ImageMagick's PSB (PSD v2) RLE decoder is an integer overflow that causes a heap out-of-bounds read on 32-bit builds. An attacker who supplies a crafted PSB file can leak memory contents or crash the process.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:41 UTC, 0h before NVD. All times on this page are UTC.
Applications that use Magick.NET to decode PSD/PSB images, especially 32-bit x86 builds processing files from untrusted sources. Projects that never open PSB files or only handle trusted images can likely skip it. unknown for any further detail.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Magick.NET-Q16-AnyCPU | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-AnyCPU | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-OpenMP-arm64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-OpenMP-x64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-arm64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-x64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-x86 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-OpenMP-arm64 | nuget | < 14.10.3 |
| 14.10.3 |
| Magick.NET-Q16-OpenMP-x64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-OpenMP-x86 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-arm64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-x64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-x86 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-AnyCPU | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-OpenMP-arm64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-OpenMP-x64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-arm64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-x64 | nuget | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-x86 | nuget | < 14.10.3 | 14.10.3 |
| imagemagick | vendor | >= 6.9.0-0, < 6.9.13-40 | 6.9.13-40 |
| imagemagick | vendor | >= 7.1.2-0, < 7.1.2-15 | 7.1.2-15 |
dotnet list package, and compare it against 14.10.3.14.10.3Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An integer overflow in the PSB (PSD v2) RLE decoding path causes a heap out-of-bounds read on 32-bit builds. This can lead to information disclosure or a crash when processing crafted PSB files.
=================================================================
==3298==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf512eb00 at pc 0xf76760b5 bp 0xffc1dfb8 sp 0xffc1dfa8
READ of size 8 at 0xf512eb00 thread T0
#0 0xf76760b4 in ReadPSDChannelRLE coders/psd.c:1141
This page as .md · .json · in your agent: get_signal("CVE-2026-56367")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.