github.com
https://github.com/ImageMagick/ImageMagick GHSA-QH5G-Q395-CX4J
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
Description
Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.
Description source: GitHub Advisory
Affected products and versions
Showing 12 of 17| Product | Source | Version range | Status |
|---|---|---|---|
Magick.NET-Q16-AnyCPUBrowse NuGet / Magick.NET-Q16-AnyCPU | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-AnyCPUBrowse NuGet / Magick.NET-Q16-HDRI-AnyCPU | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-OpenMP-arm64Browse NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-arm64Browse NuGet / Magick.NET-Q16-HDRI-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-x64Browse NuGet / Magick.NET-Q16-HDRI-x64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-x86Browse NuGet / Magick.NET-Q16-HDRI-x86 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-OpenMP-arm64Browse NuGet / Magick.NET-Q16-OpenMP-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-OpenMP-x64Browse NuGet / Magick.NET-Q16-OpenMP-x64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-arm64Browse NuGet / Magick.NET-Q16-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-x64Browse NuGet / Magick.NET-Q16-x64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-x86Browse NuGet / Magick.NET-Q16-x86 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q8-AnyCPUBrowse NuGet / Magick.NET-Q8-AnyCPU | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
References
3github.com
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j github.com
https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0