PT-2026-41781 · Nuget+1 · Magick.Net-Q16-Anycpu+18

Published 2026-05-18 · Updated 2026-05-21 · CVE-2026-45664

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A missing check in the MNG coder allows for reading more images than the list limit policy permits, which can lead to excessive resource consumption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Uncontrolled Recursion

Weakness Enumeration

CWE-400

CWE-407

CWE-674

Related Identifiers

CVE-2026-45664

GHSA-G5MF-WQQ5-VWG6

Affected Products

Magick.Net-Q16-Anycpu

Magick.Net-Q16-Hdri-Anycpu

Magick.Net-Q16-Hdri-Openmp-Arm64

Magick.Net-Q16-Hdri-Openmp-X64

Magick.Net-Q16-Hdri-Arm64

Magick.Net-Q16-Hdri-X64

Magick.Net-Q16-Hdri-X86

Magick.Net-Q16-Openmp-Arm64

Magick.Net-Q16-Openmp-X64

Magick.Net-Q16-Arm64

Magick.Net-Q16-X64

Magick.Net-Q16-X86

Magick.Net-Q8-Anycpu

Magick.Net-Q8-Openmp-Arm64

Magick.Net-Q8-Openmp-X64

Magick.Net-Q8-Arm64

Magick.Net-Q8-X64

Magick.Net-Q8-X86

Imagemagick

References · 6

• https://ubuntu.com/security/CVE-2026-45664 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g5mf-wqq5-vwg6 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45664 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-45664 · Security Note
• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5mf-wqq5-vwg6 · Note
• https://github.com/ImageMagick/ImageMagick · Note