Bump Magick.NET-Q8-x64 from 14.8.2 to 14.13.1

[dependabot]

Updated Magick.NET-Q8-x64 from 14.8.2 to 14.13.1.

Release notes

Sourced from Magick.NET-Q8-x64's releases.

14.13.1

What's Changed

• Fixed loading of animated AVIF image as MagickImageCollection (#​2000)
• Fixed determining the number of frames when reading animated AVIF images (#​2005)
• Fixed loaded of indexed color PSD file (#​2007)
• Another fix when reading JPEG compressed TIFF files. (#​2016)

Related changes in ImageMagick since the last release of Magick.NET:

• Stack overflow in fx operation (GHSA-rcr6-g7jc-f57g)
• Heap Buffer Over-Write of a single byte in the JP2 encoder (GHSA-533m-3wf6-c33v)
• Use-After-Free in MSL decoder (GHSA-5r4x-w6p5-222q)
• Infinite Loop in the MIFF decoder can lead to CPU exhaustion (GHSA-7gg8-qqx7-92g5)
• Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions (GHSA-36wm-hprc-mcf5)
• Heap Buffer Over-Write in MIFF encoder when using LZMA compression (GHSA-jcqp-6r6f-3mfx)

Library updates:

• ImageMagick 7.1.2-23 (2026-05-17)
• aom 3.14.0 (2026-05-12)
• openexr 3.4.11 (2026-04-30)
• libhwy 1.4.0 (2026-04-23)
• lcms 2.19.1 (2026-05-06)
• openjph 0.27.3 (2026-05-14)

Full Changelog: dlemstra/Magick.NET@14.13.0...14.13.1

14.13.0

What's Changed

• Added PixelDifferenceCount to ErrorMetric.

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected the patch that was made earlier to fix reading JPEG compressed TIFF images (#​1993)
• Call CloseBlob on the correct image to prevent the blob from remaining open (#​1997)

Library updates:

• ImageMagick 7.1.2-21 (2026-04-21)
• harfbuzz 14.2.0 (2026-04-20)
• libpng 1.6.58 (2026-04-15)
• libraqm 0.10.5 (2026-04-11)
• libraw 0.22.1 (2026-04-06)
• libxml2 2.15.3 (2026-04-15)
• openexr 3.4.9 (2026-04-17)
• openjph 0.27.0 (2026-04-14)

Full Changelog: dlemstra/Magick.NET@14.12.0...14.13.0

14.12.0

What's Changed

• Added FixByteOrder to the DcmReadDefines (#​1976)
• Added IconWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Correct bug in Composite when using CopyAlpha (#​1985)
• Fixed incorrect orientation of JPEG compressed TIFF images (#​1991)
• Heap-Buffer-Overflow write of single zero byte when parsing xml (GHSA-cr67-pvmx-2pp2)
• Stack Overflow in DestroyXMLTree (GHSA-fwvm-ggf6-2p4x)
• Out-of-Bounds read in sample operation (GHSA-pcvx-ph33-r5vv)
• Stack Overflow via Recursive FX Expression Parsing (GHSA-f4qm-vj5j-9xpw)
• Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-x9h5-r9v2-vcww)
• Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds (GHSA-v67w-737x-v2c9)
• Stack-buffer-overflow in MNG encoder with oversized pallete (GHSA-98cp-rj9f-6v5g)
• Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds (GHSA-26qp-ffjh-2x4v)
• Off-by-One in MSL decoder could result in crash (GHSA-5xg3-585r-9jh5)
• Heap buffer overflow when encoding JXL image with a 16-bit float (GHSA-jvgr-9ph5-m8v4)
• Heap-use-after-free via XMP profile could result in a crash when printing the values (GHSA-r83h-crwp-3vm7)
• Heap buffer overflow (WRITE) in the YAML and JSON encoders (GHSA-5592-p365-24xh)
• Heap out-of-bounds write in JP2 encoder (GHSA-pwg5-6jfc-crvh)

Library updates:

• ImageMagick 7.1.2-19 (2026-04-12)
• aom 3.13.3 (2026-04-02)
• openexr 3.4.9 (2026-04-03)
• freetype 2.14.3 (2026-03-22)
• gdk-pixbuf 2.44.6 (2026-03-31)
• harfbuzz 14.0.0 (2026-04-01)
• liblzma 5.8.3 (2026-04-31)
• libpng 1.6.56 (2026-03-25)

Full Changelog: dlemstra/Magick.NET@14.11.1...14.12.0

14.11.1

Related changes in ImageMagick since the last release of Magick.NET:

• Stack-buffer-overflow WRITE in InterpretImageFilename due to overflow (GHSA-8793-7xv6-82cf)

Library updates:

• ImageMagick 7.1.2-18 (2026-03-23)
• aom 3.13.2 (2026-03-19)
• openexr 3.4.7 (2026-03-15)
• harfbuzz 13.2.1 (2026-03-19)

Full Changelog: dlemstra/Magick.NET@14.11.0...14.11.1

14.11.0

What's Changed

• Added DcmReadDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Access mode change for files created from 0666 to 0600 (Access mode change for files created from 0666 to 0600 ImageMagick/ImageMagick#8609)
• Heap-buffer-overflow in NewXMLTree could result in crash (GHSA-gc62-2v5p-qpmp)

Library updates:

• ImageMagick 7.1.2-17 (2026-03-16)
• openexr 3.4.6 (2026-03-01)
• freetype 2.14.2 (2026-03-01)
• harfbuzz 13.0.1 (2026-03-07)
• libxml2 2.15.2 (2026-03-03)

Full Changelog: dlemstra/Magick.NET@14.10.4...14.11.0

14.10.4

Related changes in ImageMagick since the last release of Magick.NET:

• Corrected DCX conversion (#​1965)
• Heap use-after-free in the MSL encoder (GHSA-xxw5-m53x-j38c)
• Heap Use-After-Free in ImageMagick MSL decoder (GHSA-fpvf-frm6-625q)
• Write heap-buffer-overflow in PCL encoder via undersized output buffer (GHSA-467j-76j7-5885)
• Path Policy TOCTOU symlink race bypass (GHSA-493f-jh8w-qhx3)
• Stack write buffer overflow in MNG encoder (GHSA-7h7q-j33q-hvpf)
• Uninitialized pointer dereference in JBIG decoder (GHSA-wj8w-pjxf-9g4f)
• Heap buffer over-read via 32-bit integer overflow in MAT decoder (GHSA-mrmj-x24c-wwcv)
• Integer overflow in DIB coder can result in out of bounds read or write (GHSA-hffp-q43q-qq76)
• Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (GHSA-qpg4-j99f-8xcg)
• Integer Overflow lead to out of bounds write in SIXEL decoder (GHSA-r39q-jr8h-gcq2)
• Stack corruption through long morphology kernel names or arrays (GHSA-932h-jw47-73jm)
• Heap Buffer Overflow in WaveletDenoiseImage (GHSA-5ggv-92r5-cp4p)
• Heap Buffer Over-Read in BilateralBlurImage (GHSA-cqw9-w2m7-r2m2)
• Stack buffer overflow in MagnifyImage (GHSA-rqq8-jh93-f4vg)
• Heap buffer over-write on 32-bit systems in SFW decoder (GHSA-56jp-jfqg-f8f4)
• Heap-based buffer overflow in UHDR encoder (GHSA-h95r-c8c7-mrwx)
• Heap buffer over-write when writing extremely large image profile in the PNG encoder (GHSA-qmw5-2p58-xvrc)
• Possible stack buffer overflow in sixel encoder (GHSA-49hx-7656-jpg3)

Library updates:

• ImageMagick 7.1.2-16 (2026-03-08)
• openexr 3.4.5 (2026-02-21)

Full Changelog: dlemstra/Magick.NET@14.10.3...14.10.4

14.10.3

Related changes in ImageMagick since the last release of Magick.NET:

• Fixed OpenCL initialization (#​1954)
• Heap buffer over-read in WaveletDenoise with small images (GHSA-qpgx-jfcq-r59f)
• Possible infinite loop in JPEG encoder when using jpeg:extent (GHSA-gwr3-x37h-h84v)
• Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (GHSA-v994-63cg-9wj3)
• Invalid MSL can result in a use after free (GHSA-w8mw-frc6-r7m8)
• Out of bounds read in djvu decoder (GHSA-r99p-5442-q2x2)
• Memory allocation with excessive without limits in the internal SVG decoder (GHSA-v7g2-m8c5-mf84)
• Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (GHSA-7355-pwx2-pm84)
• Heap overflow in sun decoder on 32-bit systems can result in out of bounds write (GHSA-6j5f-24fw-pqp4)
• Code injection in various encoders (GHSA-rw6c-xp26-225v)
• Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer (GHSA-vpxv-r9pg-7gpr)
• Heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions (GHSA-vhqj-f5cj-9x8h)
• Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (GHSA-g2pr-qxjg-7r2w)
• NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) (GHSA-p33r-fqw2-rqmm)
• Possible memory leak in ASHLAR encoder (GHSA-gm37-qx7w-p258)
• Policy bypass through path traversal allows reading restricted content despite secured policy (GHSA-8jvj-p28h-9gm7)
• Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access (GHSA-xwc6-v6g8-pw2h)
• Heap buffer overflow in YUV 4:2:2 decoder (GHSA-mqfc-82jx-3mr2)
• Heap buffer over-read in MAP image decoder (GHSA-42p5-62qq-mmh7)
• NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (GHSA-p863-5fgm-rgq4)
• Division-by-Zero in YUV sampling factor validation leads to crash (GHSA-543g-8grm-9cw6)
• Stack buffer overflow in FTXT reader via oversized integer field (GHSA-72hf-fj62-w6j4)
• MSL image stack index not refreshed leading to leaked images (GHSA-782x-jh29-9mf7)
• MSL attribute stack buffer overflow leads to out of bounds write (GHSA-3mwp-xqp2-q6ph)
• Memory leak in msl encoder (GHSA-gxcx-qjqp-8vjw)
• Memory Leak in coders/ashlar.c (GHSA-xgm3-v4r9-wfgm)
• Signed Integer Overflow in ImageMagick SIXEL Decoder (GHSA-xg29-8ghv-v4xr)
• MSL: Stack overflow in ProcessMSLScript (GHSA-8mpr-6xr2-chhc)
• Heap Out-of-Bounds Read in DCM Decoder (GHSA-pmq6-8289-hx3v)
• Out of bounds read in multiple coders that read raw pixel data (GHSA-jv4p-gjwq-9r2j)
• Use After Free (CWE-416) in MSLStartElement in MSL decoder (GHSA-fwqw-2x5x-w566)
• Possible Heap Information Disclosure in PSD ZIP Decompression (GHSA-96pc-27rx-pr36)
• Converting multi-layer nested MVG to SVG can cause DoS (GHSA-wg3g-gvx5-2pmv)
• An infinite loop vulnerability when parsing a PCD file (GHSA-pqgj-2p96-rx85)
• Heap overflow in pcd decoder leads to out of bounds read (GHSA-wrhr-rf8j-r842)

Library updates:

• ImageMagick 7.1.2-15 (2026-02-22)
• gdk-pixbuf 2.44.5 (2026-01-29)
• harfbuzz 12.3.2 (2026-01-24)
• libheif 1.21.2 (2026-01-16)
• libjxl 0.11.2 (2026-02-10)
• libpng 1.6.55 (2026-02-09)
• libraqm 0.10.4 (2026-02-05)
• openjph 0.26.3 (2026-02-17)
• zlib 1.3.2 (2026-02-17)

Full Changelog: dlemstra/Magick.NET@14.10.2...14.10.3

14.10.2

Related changes in ImageMagick since the last release of Magick.NET:

• Check if the aspect ratio is a known ratio when density_unit is set to zero and otherwise read it as an undefined density in the jpeg coder (identify doesn't report resolution when units = undefined ImageMagick/ImageMagick#8496)
• Converting a PNG to AVIFF with Alpha(AlphaOption.Deactivate) and Scale causes application crash (#​1950)
• Release of Invalid Pointer in BilateralBlur when memory allocation fails (GHSA-39h3-g67r-7g3c)
• Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML (GHSA-qp59-x883-77qv)
• NULL pointer dereference in MSL parser via tag before image load (GHSA-5vx3-wx4q-6cj8)
• MSL: Stack overflow via infinite recursion in ProcessMSLScript (GHSA-9vj4-wc7r-p844)
• Heap buffer overflow with attacker-controlled data in XBM parser (GHSA-r49w-jqq3-3gx8)

Library updates:

• ImageMagick 7.1.2-13 (2026-01-19)
• harfbuzz 12.3.0 (2025-12-27)
• libheif 1.21.1 (2025-12-31)
• lcms 2.18.0 (2026-01-09)
• openjph 0.26.0 (2025-12-24)
• libraw 0.22.0 (2026-01-13)

Full Changelog: dlemstra/Magick.NET@14.10.1...14.10.2

14.10.1

Related changes in ImageMagick since the last release of Magick.NET:

• Only allow setting the data_precision to values other then 16 and 12 when quality is lossless (>= 100) in the jpeg coder.
• Revert patches to solve Group 4 compression not applied when converting PostScript to TIFF in single command ImageMagick/ImageMagick#8484 and Compression of Group4Compression is not getting applied with the following source code. ImageMagick/ImageMagick#8506.
• Magick's failure to limit the depth of SVG file reads caused a DoS attack (GHSA-p27m-hp98-6637)
• Magick's failure to limit MVG mutual references forming a loop (GHSA-7rvh-xqp3-pr8j)
• Converting a malicious MVG file to SVG caused an integer overflow (GHSA-hrh7-j8q2-4qcw)

Library updates:

• ImageMagick 7.1.2-12 (2025-12-29)
• libjpeg-turbo 3.1.3 (2025-12-10)
• liblzma 5.8.2 (2025-12-17)
• libpng 1.6.53 (2025-12-05)

Full Changelog: dlemstra/Magick.NET@14.10.0...14.10.1

14.10.0

What's Changed

• Allow specifying the pdf format in the constructor of the PdfWriteDefines (#​1931).
• Added HighBitDepth to the JpegWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

• Move writing of the IDAT chunk to the end to silence a warning in exiftool (Exiftool warns Text/EXIF chunk after PNG IDAT for simplistic file ImageMagick/ImageMagick#8400)
• Added custom end of file check to the pnm encoder to allow a missing final newline (pgm P2 Format Parsing Error When Final Line Lacks Newline Character ImageMagick/ImageMagick#8425)
• Close temporary file to make sure it can be opened again (Unable to read CALS file ImageMagick/ImageMagick#8420)
• JPEG: Support 2-to-16-bit lossless JPEG images with libjpeg-turbo 3.1+; Support additional IDCT scaling factors with libjpeg-turbo and libjpeg v7+ (JPEG: Support 2-to-16-bit lossless JPEG images with libjpeg-turbo 3.1+; Support additional IDCT scaling factors with libjpeg-turbo and libjpeg v7+ ImageMagick/ImageMagick#8445)
• Correct parsing of the density ((Regression: JPEG with density_unit=0 interpreted as 1 DPI instead of aspect ratio ImageMagick/ImageMagick#8460)
• Added extra check to avoid an overflow on 32-bit machines (GHSA-6hjr-v6g4-3fm8)

Library updates:

• ImageMagick 7.1.2-10 (2025-12-07)
• brotli 1.2.0 (2025-10-27)
• openexr 3.4.4 (2025-11-19)
• harfbuzz 12.2.0 (2025-11-05)
• openjph 0.25.3 (2025-11-16)
• libpng 1.6.52 (2025-12-03)
• REMOVED: libdeflate (#​1932)

Full Changelog: dlemstra/Magick.NET@14.9.1...14.10.0

14.9.1

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

• CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) (GHSA-wpp4-vqfq-v4hp)

Library updates:

• ImageMagick 7.1.2-8 (2025-10-28)
• openexr 3.4.2 (2025-10-16)
• gdk-pixbuf 2.44.4 (2025-10-21)
• imath 3.2.2 (2025-10-08)
• libxml2 2.15.1 (2025-10-16)

Full Changelog: dlemstra/Magick.NET@14.8.2...14.9.0

14.9.0

What's Changed

• Converting Tif file with 2 alpha channels yields scrambled result. #​1523
• Embedded base64 image not rendered when converting SVG on Linux RHEL (regression since 14.7.1) #​1917
• Allow setting the StrokeDashArray of the DrawingSettings to null.
• Moved static properties in ColorProfile to a new ColorProfiles class and mark them obsolete.

Related changes in ImageMagick since the last release of Magick.NET:

• Fix issue where the size of a line is extended to 70 characters when writing a PBM image (Restore previous PBM raster line format ImageMagick/ImageMagick#8346).
• Extra images will be added as meta channels when combining images.
• Added support for reading and writing meta channels in a TIFF images with separate planes of data.
• Promote photometric tiff tag to required
• Added extra check to resolve issue on 32-bit systems (GHSA-9pp9-cfwx-54rm)

Library updates:

• ImageMagick 7.1.2-7 (2025-10-15)
• aom 3.13.1 (2025-09-05)
• openexr 3.4.0 (2025-09-05)
• freetype 2.14.1 (2024-09-11)
• gdk-pixbuf 2.44.3 (2025-09-30)
• harfbuzz 12.1.0 (2025-10-01)
• libjpeg-turbo 3.1.2 (2025-09-03)
• openjpeg 2.5.4 (2025-09-20)
• libtiff 4.7.1 (2025-09-12)
• libxml2 2.15.0 (2025-09-15)

Full Changelog: dlemstra/Magick.NET@14.8.2...14.9.0

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.