{"id":"GHSA-rg39-4fm5-hrp2","title":"Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds","summary":"Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds","severity":"medium","cvss":3.7,"cwe":["CWE-125"],"vendor":"Magick","product":"Magick.NET-Q8-x86","ecosystem":"nuget","affected":["Magick.NET-Q8-x86 < 14.10.3"],"patched":["Magick.NET-Q8-x86 14.10.3"],"published":"2026-06-21","updated":"2026-11-03","sourceUpdated":"2026-11-03T17:37:30Z","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-rg39-4fm5-hrp2","references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56367"},{"url":"https://www.vulncheck.com/advisories/imagemagick-heap-out-of-bounds-read-in-psb-rle-decoding"},{"url":"https://github.com/advisories/GHSA-rg39-4fm5-hrp2"}],"tags":["ghsa","nuget"],"ingestedAt":"2026-11-03T17:50:48.248Z","slug":"GHSA-rg39-4fm5-hrp2","body":"## Overview\n\n### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-273h-m46v-96q4. This link is maintained to preserve external references.\n\n### Original Description\nImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.\n\n## Affected packages\n\n- `Magick.NET-Q8-x86 < 14.10.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `Magick.NET-Q8-x86 14.10.3`","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}