Magick.NET 14.13.0

What's Changed

• Added PixelDifferenceCount to ErrorMetric.

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected the patch that was made earlier to fix reading JPEG compressed TIFF images (#1993)
• Call CloseBlob on the correct image to prevent the blob from remaining open (#1997)

Library updates:

• ImageMagick 7.1.2-21 (2026-04-21)
• harfbuzz 14.2.0 (2026-04-20)
• libpng 1.6.58 (2026-04-15)
• libraqm 0.10.5 (2026-04-11)
• libraw 0.22.1 (2026-04-06)
• libxml2 2.15.3 (2026-04-15)
• openexr 3.4.9 (2026-04-17)
• openjph 0.27.0 (2026-04-14)

Full Changelog: 14.12.0...14.13.0

Magick.NET 14.12.0

What's Changed

• Added FixByteOrder to the DcmReadDefines (#1976)
• Added IconWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Correct bug in Composite when using CopyAlpha (#1985)
• Fixed incorrect orientation of JPEG compressed TIFF images (#1991)
• Heap-Buffer-Overflow write of single zero byte when parsing xml (GHSA-cr67-pvmx-2pp2)
• Stack Overflow in DestroyXMLTree (GHSA-fwvm-ggf6-2p4x)
• Out-of-Bounds read in sample operation (GHSA-pcvx-ph33-r5vv)
• Stack Overflow via Recursive FX Expression Parsing (GHSA-f4qm-vj5j-9xpw)
• Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-x9h5-r9v2-vcww)
• Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds (GHSA-v67w-737x-v2c9)
• Stack-buffer-overflow in MNG encoder with oversized pallete (GHSA-98cp-rj9f-6v5g)
• Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds (GHSA-26qp-ffjh-2x4v)
• Off-by-One in MSL decoder could result in crash (GHSA-5xg3-585r-9jh5)
• Heap buffer overflow when encoding JXL image with a 16-bit float (GHSA-jvgr-9ph5-m8v4)
• Heap-use-after-free via XMP profile could result in a crash when printing the values (GHSA-r83h-crwp-3vm7)
• Heap buffer overflow (WRITE) in the YAML and JSON encoders (GHSA-5592-p365-24xh)
• Heap out-of-bounds write in JP2 encoder (GHSA-pwg5-6jfc-crvh)

Library updates:

• ImageMagick 7.1.2-19 (2026-04-12)
• aom 3.13.3 (2026-04-02)
• openexr 3.4.9 (2026-04-03)
• freetype 2.14.3 (2026-03-22)
• gdk-pixbuf 2.44.6 (2026-03-31)
• harfbuzz 14.0.0 (2026-04-01)
• liblzma 5.8.3 (2026-04-31)
• libpng 1.6.56 (2026-03-25)

Full Changelog: 14.11.1...14.12.0

Magick.NET 14.11.1

Related changes in ImageMagick since the last release of Magick.NET:

• Stack-buffer-overflow WRITE in InterpretImageFilename due to overflow (GHSA-8793-7xv6-82cf)

Library updates:

• ImageMagick 7.1.2-18 (2026-03-23)
• aom 3.13.2 (2026-03-19)
• openexr 3.4.7 (2026-03-15)
• harfbuzz 13.2.1 (2026-03-19)

Full Changelog: 14.11.0...14.11.1

Magick.NET 14.11.0

What's Changed

• Added DcmReadDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Access mode change for files created from 0666 to 0600 (ImageMagick/ImageMagick#8609)
• Heap-buffer-overflow in NewXMLTree could result in crash (GHSA-gc62-2v5p-qpmp)

Library updates:

• ImageMagick 7.1.2-17 (2026-03-16)
• openexr 3.4.6 (2026-03-01)
• freetype 2.14.2 (2026-03-01)
• harfbuzz 13.0.1 (2026-03-07)
• libxml2 2.15.2 (2026-03-03)

Full Changelog: 14.10.4...14.11.0

Magick.NET 14.10.4

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected DCX conversion (#1965)
• Heap use-after-free in the MSL encoder (GHSA-xxw5-m53x-j38c)
• Heap Use-After-Free in ImageMagick MSL decoder (GHSA-fpvf-frm6-625q)
• Write heap-buffer-overflow in PCL encoder via undersized output buffer (GHSA-467j-76j7-5885)
• Path Policy TOCTOU symlink race bypass (GHSA-493f-jh8w-qhx3)
• Stack write buffer overflow in MNG encoder (GHSA-7h7q-j33q-hvpf)
• Uninitialized pointer dereference in JBIG decoder (GHSA-wj8w-pjxf-9g4f)
• Heap buffer over-read via 32-bit integer overflow in MAT decoder (GHSA-mrmj-x24c-wwcv)
• Integer overflow in DIB coder can result in out of bounds read or write (GHSA-hffp-q43q-qq76)
• Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (GHSA-qpg4-j99f-8xcg)
• Integer Overflow lead to out of bounds write in SIXEL decoder (GHSA-r39q-jr8h-gcq2)
• Stack corruption through long morphology kernel names or arrays (GHSA-932h-jw47-73jm)
• Heap Buffer Overflow in WaveletDenoiseImage (GHSA-5ggv-92r5-cp4p)
• Heap Buffer Over-Read in BilateralBlurImage (GHSA-cqw9-w2m7-r2m2)
• Stack buffer overflow in MagnifyImage (GHSA-rqq8-jh93-f4vg)
• Heap buffer over-write on 32-bit systems in SFW decoder (GHSA-56jp-jfqg-f8f4)
• Heap-based buffer overflow in UHDR encoder (GHSA-h95r-c8c7-mrwx)
• Heap buffer over-write when writing extremely large image profile in the PNG encoder (GHSA-qmw5-2p58-xvrc)
• Possible stack buffer overflow in sixel encoder (GHSA-49hx-7656-jpg3)

Library updates:

• ImageMagick 7.1.2-16 (2026-03-08)
• openexr 3.4.5 (2026-02-21)

Full Changelog: 14.10.3...14.10.4

Magick.NET 14.10.3

Related changes in ImageMagick since the last release of Magick.NET:

• Fixed OpenCL initialization (#1954)
• Heap buffer over-read in WaveletDenoise with small images (GHSA-qpgx-jfcq-r59f)
• Possible infinite loop in JPEG encoder when using jpeg:extent (GHSA-gwr3-x37h-h84v)
• Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (GHSA-v994-63cg-9wj3)
• Invalid MSL can result in a use after free (GHSA-w8mw-frc6-r7m8)
• Out of bounds read in djvu decoder (GHSA-r99p-5442-q2x2)
• Memory allocation with excessive without limits in the internal SVG decoder (GHSA-v7g2-m8c5-mf84)
• Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (GHSA-7355-pwx2-pm84)
• Heap overflow in sun decoder on 32-bit systems can result in out of bounds write (GHSA-6j5f-24fw-pqp4)
• Code injection in various encoders (GHSA-rw6c-xp26-225v)
• Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer (GHSA-vpxv-r9pg-7gpr)
• Heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions (GHSA-vhqj-f5cj-9x8h)
• Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (GHSA-g2pr-qxjg-7r2w)
• NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) (GHSA-p33r-fqw2-rqmm)
• Possible memory leak in ASHLAR encoder (GHSA-gm37-qx7w-p258)
• Policy bypass through path traversal allows reading restricted content despite secured policy (GHSA-8jvj-p28h-9gm7)
• Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access (GHSA-xwc6-v6g8-pw2h)
• Heap buffer overflow in YUV 4:2:2 decoder (GHSA-mqfc-82jx-3mr2)
• Heap buffer over-read in MAP image decoder (GHSA-42p5-62qq-mmh7)
• NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (GHSA-p863-5fgm-rgq4)
• Division-by-Zero in YUV sampling factor validation leads to crash (GHSA-543g-8grm-9cw6)
• Stack buffer overflow in FTXT reader via oversized integer field (GHSA-72hf-fj62-w6j4)
• MSL image stack index not refreshed leading to leaked images (GHSA-782x-jh29-9mf7)
• MSL attribute stack buffer overflow leads to out of bounds write (GHSA-3mwp-xqp2-q6ph)
• Memory leak in msl encoder (GHSA-gxcx-qjqp-8vjw)
• Memory Leak in coders/ashlar.c (GHSA-xgm3-v4r9-wfgm)
• Signed Integer Overflow in ImageMagick SIXEL Decoder (GHSA-xg29-8ghv-v4xr)
• MSL: Stack overflow in ProcessMSLScript (GHSA-8mpr-6xr2-chhc)
• Heap Out-of-Bounds Read in DCM Decoder (GHSA-pmq6-8289-hx3v)
• Out of bounds read in multiple coders that read raw pixel data (GHSA-jv4p-gjwq-9r2j)
• Use After Free (CWE-416) in MSLStartElement in MSL decoder (GHSA-fwqw-2x5x-w566)
• Possible Heap Information Disclosure in PSD ZIP Decompression (GHSA-96pc-27rx-pr36)
• Converting multi-layer nested MVG to SVG can cause DoS (GHSA-wg3g-gvx5-2pmv)
• An infinite loop vulnerability when parsing a PCD file (GHSA-pqgj-2p96-rx85)
• Heap overflow in pcd decoder leads to out of bounds read (GHSA-wrhr-rf8j-r842)

Library updates:

• ImageMagick 7.1.2-15 (2026-02-22)
• gdk-pixbuf 2.44.5 (2026-01-29)
• harfbuzz 12.3.2 (2026-01-24)
• libheif 1.21.2 (2026-01-16)
• libjxl 0.11.2 (2026-02-10)
• libpng 1.6.55 (2026-02-09)
• libraqm 0.10.4 (2026-02-05)
• openjph 0.26.3 (2026-02-17)
• zlib 1.3.2 (2026-02-17)

Full Changelog: 14.10.2...14.10.3

Magick.NET 14.10.2

Related changes in ImageMagick since the last release of Magick.NET:

• Check if the aspect ratio is a known ratio when density_unit is set to zero and otherwise read it as an undefined density in the jpeg coder (ImageMagick/ImageMagick#8496)
• Converting a PNG to AVIFF with Alpha(AlphaOption.Deactivate) and Scale causes application crash (#1950)
• Release of Invalid Pointer in BilateralBlur when memory allocation fails (GHSA-39h3-g67r-7g3c)
• Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML (GHSA-qp59-x883-77qv)
• NULL pointer dereference in MSL parser via tag before image load (GHSA-5vx3-wx4q-6cj8)
• MSL: Stack overflow via infinite recursion in ProcessMSLScript (GHSA-9vj4-wc7r-p844)
• Heap buffer overflow with attacker-controlled data in XBM parser (GHSA-r49w-jqq3-3gx8)

Library updates:

• ImageMagick 7.1.2-13 (2026-01-19)
• harfbuzz 12.3.0 (2025-12-27)
• libheif 1.21.1 (2025-12-31)
• lcms 2.18.0 (2026-01-09)
• openjph 0.26.0 (2025-12-24)
• libraw 0.22.0 (2026-01-13)

Full Changelog: 14.10.1...14.10.2

Magick.NET 14.10.1

Related changes in ImageMagick since the last release of Magick.NET:

• Only allow setting the data_precision to values other then 16 and 12 when quality is lossless (>= 100) in the jpeg coder.
• Revert patches to solve ImageMagick/ImageMagick#8484 and ImageMagick/ImageMagick#8506.
• Magick's failure to limit the depth of SVG file reads caused a DoS attack (GHSA-p27m-hp98-6637)
• Magick's failure to limit MVG mutual references forming a loop (GHSA-7rvh-xqp3-pr8j)
• Converting a malicious MVG file to SVG caused an integer overflow (GHSA-hrh7-j8q2-4qcw)

Library updates:

• ImageMagick 7.1.2-12 (2025-12-29)
• libjpeg-turbo 3.1.3 (2025-12-10)
• liblzma 5.8.2 (2025-12-17)
• libpng 1.6.53 (2025-12-05)

Full Changelog: 14.10.0...14.10.1

Magick.NET 14.10.0

What's Changed

• Allow specifying the pdf format in the constructor of the PdfWriteDefines (#1931).
• Added HighBitDepth to the JpegWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Move writing of the IDAT chunk to the end to silence a warning in exiftool (ImageMagick/ImageMagick#8400)
• Added custom end of file check to the pnm encoder to allow a missing final newline (ImageMagick/ImageMagick#8425)
• Close temporary file to make sure it can be opened again (ImageMagick/ImageMagick#8420)
• JPEG: Support 2-to-16-bit lossless JPEG images with libjpeg-turbo 3.1+; Support additional IDCT scaling factors with libjpeg-turbo and libjpeg v7+ (ImageMagick/ImageMagick#8445)
• Correct parsing of the density ((ImageMagick/ImageMagick#8460)
• Added extra check to avoid an overflow on 32-bit machines (GHSA-6hjr-v6g4-3fm8)

Library updates:

• ImageMagick 7.1.2-10 (2025-12-07)
• brotli 1.2.0 (2025-10-27)
• openexr 3.4.4 (2025-11-19)
• harfbuzz 12.2.0 (2025-11-05)
• openjph 0.25.3 (2025-11-16)
• libpng 1.6.52 (2025-12-03)
• REMOVED: libdeflate (#1932)

Full Changelog: 14.9.1...14.10.0

Magick.NET 14.9.1

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

• CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) (GHSA-wpp4-vqfq-v4hp)

Library updates:

• ImageMagick 7.1.2-8 (2025-10-28)
• openexr 3.4.2 (2025-10-16)
• gdk-pixbuf 2.44.4 (2025-10-21)
• imath 3.2.2 (2025-10-08)
• libxml2 2.15.1 (2025-10-16)

Full Changelog: 14.8.2...14.9.0