CVE-2026-53465: ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

June 26, 2026

An crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder.

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-44cp-c3ww-9rv5
github.com/advisories/GHSA-44cp-c3ww-9rv5
github.com/dlemstra/Magick.NET/releases/tag/14.14.0
nvd.nist.gov/vuln/detail/CVE-2026-53465

Code Behaviors & Features

Detect and mitigate CVE-2026-53465 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →