Magick.NET-Q8-AnyCPU

What's Changed

• Check if an exception was thrown to prevent a deadlock when reading the image asynchronous (#2084)

Full Changelog: 14.17.0...14.17.1

What's Changed

• Make sure that ReadAsync and WriteAsync throw an OperationCanceledException when the task was canceled (#2066)
• Fixed decoding of yuv422 tiff (#2074)
• Added JFIF as a supported extension (##2075)
• Report the correct error when decoding an invalid WebP file (#2076)
• Make sure we clear the collection before reading in the ReadAsync and PingAsync methods (#2077)
• Make sure that WriteAsync uses a stream that is both readable and writable when reading from a file path (#2081)
• Fixed cancelling MagickImage.ReadAsync crashes the process with an access violation (14.16.0, 14.15.0) (#2084)

Related changes in ImageMagick since the last release of Magick.NET:

• Added initial support for the aseprite format (ImageMagick/ImageMagick#8783)
• Phase similarity now matches Fred's phase script
• Amiga Workbench .info coder (image/x-amiga-icon) (ImageMagick/ImageMagick#8606)
• Add c2pa coder framework
• Stack Overflown CALS decoder due to missing depth check (GHSA-wxw6-98rj-hjfr)
• Policy Bypass in MAT decoder when reading highly compressed data (GHSA-3j4w-pvxj-fpjc)
• Denial of service with crafted XMP profile (GHSA-27m9-54jx-fgvq)
• Policy Bypass in CUT encoder (GHSA-r868-pmwh-fv2c)
• Invalid Memory Free in MVG decoder (GHSA-6xf5-c3jx-rp39)
• Code Injection in the postscript coders (GHSA-5rg6-j44q-q892)
• Policy Bypass when using coder as the domain (GHSA-vcjj-32hg-qpx5)
• Denial of service possible when parsing an XMP profile (GHSA-v45j-x8p4-3mh4)
• Unclosed file pointer in magick script (GHSA-2w4h-697j-4vrm)
• Denial of service in MVG decoder (GHSA-qr53-hc3p-fc62)

Library updates:

• ImageMagick 7.1.2-31 (2026-09-03)
• aom 3.15.0 (2026-08-25)
• openexr 3.4.15 (2026-08-22)
• libffi 3.8.0 (2026-08-09)
• fontconfig 2.18.3 (2026-08-06)
• gdk-pixbuf 2.44.8 (2026-08-12)
• harfbuzz 14.4.0 (2026-08-26)
• libheif 1.23.2 (2026-08-25)
• imath 3.2.3 (2026-08-20)
• openjph 0.31.0 (2026-07-27)

Full Changelog: 14.16.0...14.17.0

What's Changed

• Fixed stackoverflow when using the library in IIS (#2049)
• Added support for reading the XMP profile when pinging a raw image (#2052)
• Added Version to MagickFormatInfo.
• Fixed thread pool starvation in AsyncStreamWrapper causing concurrent ReadAsync/WriteAsync to stall (#2056)
• Fixed issue where ImportIndexedPixels would always use a GrayScale colorspace (#2057)

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected IsPaletteImage check.
• Fix memory leak in ASHLAR coder when action fails (ImageMagick/ImageMagick#8865)
• Changed spatial PHASE algorithm
• Fixes for PTIF writer to re-enable default creation of pyramid levels (ImageMagick/ImageMagick#8884)
• Set the page values when reading the x and y offset in a tga file (ImageMagick/ImageMagick#8847)

Library updates:

• ImageMagick 7.1.2-29 (2026-07-27)
• libffi 3.7.1 (2026-07-10)
• fontconfig 2.18.2 (2026-07-09)
• libjpeg-turbo 3.2.0 (2025-06-30)
• libraqm 0.11.0 (2026-07-23)
• libraw 0.22.2 (2026-07-16)

Full Changelog: 14.15.0...14.16.0

What's Changed

• Add PingAsync to MagickImage and MagickImageCollection (#2032).
• Added ImportIndexedPixels to MagickImage (#2040)

Related changes in ImageMagick since the last release of Magick.NET:

• Stack Overflow in MVG decoder due to missing depth check (GHSA-mx48-2qq3-23hf)
• Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-wx47-rm3x-jx6p)
• Policy Bypass due to an incomplete fix of CVE-2026-49219 (GHSA-56m6-8q75-f2rw)
• Infinite Loop in connected-components when providing invalid arguments (GHSA-qhmf-7fc4-8q3h)
• Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments (GHSA-c4v7-w88g-m6c4)
• Policy Bypass in concatenate operation due to missing checks (GHSA-82mp-vp5c-9pf7)
• Use-After-Free in crafted 8BIM when identifying an image (GHSA-ff5c-8x9r-8qcw)
• Information Disclosure in MNG decoder because allocated memory is left unchanged (GHSA-8g53-9m3c-69xg)
• Heap Buffer Over-Read in XCF decoder due to integer conversion overflow (GHSA-pjxj-pchx-4c3m)
• Heap Buffer Over-Write in morphology operation when an invalid kernel is provided (GHSA-f5m7-cqgw-8hm7)
• Heap Buffer Over-Read in BGR decoder due to mising end-of-file check (GHSA-7rgw-xg25-prjm)
• Heap Buffer Over-Write in fx operation (GHSA-422r-8c97-xcg4)
• Integer Overflow in JNX decoder causes heap buffer over-write when processing extremely large files on 32-bit builds (GHSA-h22j-f9xw-xjjm)

Library updates:

• ImageMagick 7.1.2-27 (2026-07-05)
• libde265 1.1.1 (2026-06-03)
• openexr 3.4.13 (2026-06-19)
• libffi 3.6.0 (2026-06-20)
• fontconfig 2.18.1 (2026-06-02)
• gdk-pixbuf 2.44.7 (2026-06-27)
• harfbuzz 14.2.1 (2026-06-02)
• libheif 1.23.1 (2026-06-26)
• libjxl 0.12.0 (2026-07-01)
• openjph 0.30.1 (2026-06-22)
• libtiff 4.7.2 (2026-06-26)

Full Changelog: 14.14.0...14.15.0

What's Changed

• Renamed ExifParts to ExifIfds and renamed ExifProfile.Parts to ExifProfile.AllowedIfds and mark the old names as obsolete.
• Store the exif ifd in the ExifTag to make prevent marking a tag as duplicate when it is found in another ifd (#2017)
• Fixed Regression: Clip() doesn't take the correct bounding box (#2019)
• Fixed Regression: ColorType is no longer persisted (#2020)
• Fixed Native DLLs (Magick.Native-Q16-*.dll) appear at project root in Solution Explorer on .NET Framework 4.8 (#2029)

Related changes in ImageMagick since the last release of Magick.NET:

• Heap Buffer Underwrite in Floyd-Steinberg depth dithering (GHSA-2hhq-c99x-492r)
• Stack Overflow in MVG decoder (GHSA-h36c-3666-h489)
• Infinite Loop in subimage-search with crafted image (GHSA-5v62-8fq6-cp9m)
• Policy Bypass in DCM decoder could result in image with invalid dimensions (GHSA-8pj9-6897-74xc)
• Policy Bypass can read disallowed files (GHSA-xcjm-wqff-m669)
• Heap Buffer Over-Write in MAT decoder on 32-bit systems (GHSA-4v89-6mgq-6rgc)
• Policy Bypass can trigger out-of-Memory condition (GHSA-q62c-h75r-2xhc)
• Heap Buffer Over-Write in ICON decoder due to incorrect loop (GHSA-g22q-f7gc-5jhr)
• Use-After-Free when allocation in CheckPrimitiveExtent fails (GHSA-px7q-ggqj-hcf2)
• Null Pointer Dereference in distort operation when passing incorrect arguments (GHSA-p9rq-q46c-g4x6)
• Memory Leak in wand option parser when providing invalid arguments (GHSA-j989-f892-2335)
• Heap Buffer Over-Write in SF3 encoder when writing multi-frame image (GHSA-44cp-c3ww-9rv5)

Library updates:

• ImageMagick 7.1.2-25 (2026-06-04)
• aom 3.14.1 (2026-05-22)
• libde265 1.1.0 (2026-05-26)
• openexr 3.4.12 (2026-05-25)
• libheif 1.23.0 (2026-05-29)

Full Changelog: 14.13.1...14.14.0

What's Changed

• Fixed loading of animated AVIF image as MagickImageCollection (#2000)
• Fixed determining the number of frames when reading animated AVIF images (#2005)
• Fixed loaded of indexed color PSD file (#2007)
• Another fix when reading JPEG compressed TIFF files. (#2016)

Related changes in ImageMagick since the last release of Magick.NET:

• Stack overflow in fx operation (GHSA-rcr6-g7jc-f57g)
• Heap Buffer Over-Write of a single byte in the JP2 encoder (GHSA-533m-3wf6-c33v)
• Use-After-Free in MSL decoder (GHSA-5r4x-w6p5-222q)
• Infinite Loop in the MIFF decoder can lead to CPU exhaustion (GHSA-7gg8-qqx7-92g5)
• Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions (GHSA-36wm-hprc-mcf5)
• Heap Buffer Over-Write in MIFF encoder when using LZMA compression (GHSA-jcqp-6r6f-3mfx)

Library updates:

• ImageMagick 7.1.2-23 (2026-05-17)
• aom 3.14.0 (2026-05-12)
• openexr 3.4.11 (2026-04-30)
• libhwy 1.4.0 (2026-04-23)
• lcms 2.19.1 (2026-05-06)
• openjph 0.27.3 (2026-05-14)

Full Changelog: 14.13.0...14.13.1

What's Changed

• Added PixelDifferenceCount to ErrorMetric.

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected the patch that was made earlier to fix reading JPEG compressed TIFF images (#1993)
• Call CloseBlob on the correct image to prevent the blob from remaining open (#1997)

Library updates:

• ImageMagick 7.1.2-21 (2026-04-21)
• harfbuzz 14.2.0 (2026-04-20)
• libpng 1.6.58 (2026-04-15)
• libraqm 0.10.5 (2026-04-11)
• libraw 0.22.1 (2026-04-06)
• libxml2 2.15.3 (2026-04-15)
• openexr 3.4.9 (2026-04-17)
• openjph 0.27.0 (2026-04-14)

Full Changelog: 14.12.0...14.13.0

What's Changed

• Added FixByteOrder to the DcmReadDefines (#1976)
• Added IconWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Correct bug in Composite when using CopyAlpha (#1985)
• Fixed incorrect orientation of JPEG compressed TIFF images (#1991)
• Heap-Buffer-Overflow write of single zero byte when parsing xml (GHSA-cr67-pvmx-2pp2)
• Stack Overflow in DestroyXMLTree (GHSA-fwvm-ggf6-2p4x)
• Out-of-Bounds read in sample operation (GHSA-pcvx-ph33-r5vv)
• Stack Overflow via Recursive FX Expression Parsing (GHSA-f4qm-vj5j-9xpw)
• Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-x9h5-r9v2-vcww)
• Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds (GHSA-v67w-737x-v2c9)
• Stack-buffer-overflow in MNG encoder with oversized pallete (GHSA-98cp-rj9f-6v5g)
• Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds (GHSA-26qp-ffjh-2x4v)
• Off-by-One in MSL decoder could result in crash (GHSA-5xg3-585r-9jh5)
• Heap buffer overflow when encoding JXL image with a 16-bit float (GHSA-jvgr-9ph5-m8v4)
• Heap-use-after-free via XMP profile could result in a crash when printing the values (GHSA-r83h-crwp-3vm7)
• Heap buffer overflow (WRITE) in the YAML and JSON encoders (GHSA-5592-p365-24xh)
• Heap out-of-bounds write in JP2 encoder (GHSA-pwg5-6jfc-crvh)

Library updates:

• ImageMagick 7.1.2-19 (2026-04-12)
• aom 3.13.3 (2026-04-02)
• openexr 3.4.9 (2026-04-03)
• freetype 2.14.3 (2026-03-22)
• gdk-pixbuf 2.44.6 (2026-03-31)
• harfbuzz 14.0.0 (2026-04-01)
• liblzma 5.8.3 (2026-04-31)
• libpng 1.6.56 (2026-03-25)

Full Changelog: 14.11.1...14.12.0

Related changes in ImageMagick since the last release of Magick.NET:

• Stack-buffer-overflow WRITE in InterpretImageFilename due to overflow (GHSA-8793-7xv6-82cf)

Library updates:

• ImageMagick 7.1.2-18 (2026-03-23)
• aom 3.13.2 (2026-03-19)
• openexr 3.4.7 (2026-03-15)
• harfbuzz 13.2.1 (2026-03-19)

Full Changelog: 14.11.0...14.11.1

What's Changed

• Added DcmReadDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Access mode change for files created from 0666 to 0600 (ImageMagick/ImageMagick#8609)
• Heap-buffer-overflow in NewXMLTree could result in crash (GHSA-gc62-2v5p-qpmp)

Library updates:

• ImageMagick 7.1.2-17 (2026-03-16)
• openexr 3.4.6 (2026-03-01)
• freetype 2.14.2 (2026-03-01)
• harfbuzz 13.0.1 (2026-03-07)
• libxml2 2.15.2 (2026-03-03)

Full Changelog: 14.10.4...14.11.0

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected DCX conversion (#1965)
• Heap use-after-free in the MSL encoder (GHSA-xxw5-m53x-j38c)
• Heap Use-After-Free in ImageMagick MSL decoder (GHSA-fpvf-frm6-625q)
• Write heap-buffer-overflow in PCL encoder via undersized output buffer (GHSA-467j-76j7-5885)
• Path Policy TOCTOU symlink race bypass (GHSA-493f-jh8w-qhx3)
• Stack write buffer overflow in MNG encoder (GHSA-7h7q-j33q-hvpf)
• Uninitialized pointer dereference in JBIG decoder (GHSA-wj8w-pjxf-9g4f)
• Heap buffer over-read via 32-bit integer overflow in MAT decoder (GHSA-mrmj-x24c-wwcv)
• Integer overflow in DIB coder can result in out of bounds read or write (GHSA-hffp-q43q-qq76)
• Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (GHSA-qpg4-j99f-8xcg)
• Integer Overflow lead to out of bounds write in SIXEL decoder (GHSA-r39q-jr8h-gcq2)
• Stack corruption through long morphology kernel names or arrays (GHSA-932h-jw47-73jm)
• Heap Buffer Overflow in WaveletDenoiseImage (GHSA-5ggv-92r5-cp4p)
• Heap Buffer Over-Read in BilateralBlurImage (GHSA-cqw9-w2m7-r2m2)
• Stack buffer overflow in MagnifyImage (GHSA-rqq8-jh93-f4vg)
• Heap buffer over-write on 32-bit systems in SFW decoder (GHSA-56jp-jfqg-f8f4)
• Heap-based buffer overflow in UHDR encoder (GHSA-h95r-c8c7-mrwx)
• Heap buffer over-write when writing extremely large image profile in the PNG encoder (GHSA-qmw5-2p58-xvrc)
• Possible stack buffer overflow in sixel encoder (GHSA-49hx-7656-jpg3)

Library updates:

• ImageMagick 7.1.2-16 (2026-03-08)
• openexr 3.4.5 (2026-02-21)

Full Changelog: 14.10.3...14.10.4

Related changes in ImageMagick since the last release of Magick.NET:

• Fixed OpenCL initialization (#1954)
• Heap buffer over-read in WaveletDenoise with small images (GHSA-qpgx-jfcq-r59f)
• Possible infinite loop in JPEG encoder when using jpeg:extent (GHSA-gwr3-x37h-h84v)
• Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (GHSA-v994-63cg-9wj3)
• Invalid MSL can result in a use after free (GHSA-w8mw-frc6-r7m8)
• Out of bounds read in djvu decoder (GHSA-r99p-5442-q2x2)
• Memory allocation with excessive without limits in the internal SVG decoder (GHSA-v7g2-m8c5-mf84)
• Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (GHSA-7355-pwx2-pm84)
• Heap overflow in sun decoder on 32-bit systems can result in out of bounds write (GHSA-6j5f-24fw-pqp4)
• Code injection in various encoders (GHSA-rw6c-xp26-225v)
• Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer (GHSA-vpxv-r9pg-7gpr)
• Heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions (GHSA-vhqj-f5cj-9x8h)
• Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (GHSA-g2pr-qxjg-7r2w)
• NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) (GHSA-p33r-fqw2-rqmm)
• Possible memory leak in ASHLAR encoder (GHSA-gm37-qx7w-p258)
• Policy bypass through path traversal allows reading restricted content despite secured policy (GHSA-8jvj-p28h-9gm7)
• Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access (GHSA-xwc6-v6g8-pw2h)
• Heap buffer overflow in YUV 4:2:2 decoder (GHSA-mqfc-82jx-3mr2)
• Heap buffer over-read in MAP image decoder (GHSA-42p5-62qq-mmh7)
• NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (GHSA-p863-5fgm-rgq4)
• Division-by-Zero in YUV sampling factor validation leads to crash (GHSA-543g-8grm-9cw6)
• Stack buffer overflow in FTXT reader via oversized integer field (GHSA-72hf-fj62-w6j4)
• MSL image stack index not refreshed leading to leaked images (GHSA-782x-jh29-9mf7)
• MSL attribute stack buffer overflow leads to out of bounds write (GHSA-3mwp-xqp2-q6ph)
• Memory leak in msl encoder (GHSA-gxcx-qjqp-8vjw)
• Memory Leak in coders/ashlar.c (GHSA-xgm3-v4r9-wfgm)
• Signed Integer Overflow in ImageMagick SIXEL Decoder (GHSA-xg29-8ghv-v4xr)
• MSL: Stack overflow in ProcessMSLScript (GHSA-8mpr-6xr2-chhc)
• Heap Out-of-Bounds Read in DCM Decoder (GHSA-pmq6-8289-hx3v)
• Out of bounds read in multiple coders that read raw pixel data (GHSA-jv4p-gjwq-9r2j)
• Use After Free (CWE-416) in MSLStartElement in MSL decoder (GHSA-fwqw-2x5x-w566)
• Possible Heap Information Disclosure in PSD ZIP Decompression (GHSA-96pc-27rx-pr36)
• Converting multi-layer nested MVG to SVG can cause DoS (GHSA-wg3g-gvx5-2pmv)
• An infinite loop vulnerability when parsing a PCD file (GHSA-pqgj-2p96-rx85)
• Heap overflow in pcd decoder leads to out of bounds read (GHSA-wrhr-rf8j-r842)

Library updates:

• ImageMagick 7.1.2-15 (2026-02-22)
• gdk-pixbuf 2.44.5 (2026-01-29)
• harfbuzz 12.3.2 (2026-01-24)
• libheif 1.21.2 (2026-01-16)
• libjxl 0.11.2 (2026-02-10)
• libpng 1.6.55 (2026-02-09)
• libraqm 0.10.4 (2026-02-05)
• openjph 0.26.3 (2026-02-17)
• zlib 1.3.2 (2026-02-17)

Full Changelog: 14.10.2...14.10.3