Search for vulnerabilities
| Vulnerability ID | VCID-dw4p-7umw-tqhd |
| Aliases |
CVE-2026-25982
GHSA-pmq6-8289-hx3v |
| Summary | ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage) A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image). |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| System | Score | Found at |
|---|---|---|
| There are no known severity scores. | ||
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3 | ||
| https://github.com/ImageMagick/ImageMagick | ||
| CVE-2026-25982 | https://nvd.nist.gov/vuln/detail/CVE-2026-25982 | |
| GHSA-pmq6-8289-hx3v | https://github.com/advisories/GHSA-pmq6-8289-hx3v | |
| GHSA-pmq6-8289-hx3v | https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmq6-8289-hx3v |
No EPSS data available for this vulnerability.
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-06-02T04:51:45.131006+00:00 | GitLab Importer | Import | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/Magick.NET-Q8-OpenMP-arm64/CVE-2026-25982.yml | 38.6.0 |