Division by zero Affecting magick.net-q16-hdri-x86 package, versions [,14.17.1)


Severity

Recommended
0.0
medium
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.35% (27th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DOTNET-MAGICKNETQ16HDRIX86-20074546
  • published24 Sept 2026
  • disclosed18 Sept 2026
  • creditSanth · Organism

Introduced: 18 Sep 2026

NewCVE-2026-93589  (opens in a new tab)
CWE-369  (opens in a new tab)

How to fix?

Upgrade Magick.NET-Q16-HDRI-x86 to version 14.17.1 or higher.

Overview

Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop.

More information about specific builds see the [official docs] (https://github.com/dlemstra/Magick.NET/tree/main/docs)

Affected versions of this package are vulnerable to Division by zero in the FLIF encoder when an incorrect value for ticks per second is provided. An attacker can cause the encoder to crash by supplying a specially crafted image file.

CVSS Base Scores

version 4.0
version 3.1