github.com
https://github.com/ImageMagick/ImageMagick GHSA-RVHP-75F6-9JQH
ImageMagick: Policy Bypass possible with matrix-backed operations
Description
Matrix bases operations like `-canny` are missing a check for allowed memory allocation that could result allocating more memory than allowed.
Description source: GitHub Advisory
Affected products and versions
Showing 12 of 17| Product | Source | Version range | Status |
|---|---|---|---|
Magick.NET-Q16-AnyCPUBrowse NuGet / Magick.NET-Q16-AnyCPU | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-AnyCPUBrowse NuGet / Magick.NET-Q16-HDRI-AnyCPU | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-OpenMP-arm64Browse NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-arm64Browse NuGet / Magick.NET-Q16-HDRI-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-x64Browse NuGet / Magick.NET-Q16-HDRI-x64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-HDRI-x86Browse NuGet / Magick.NET-Q16-HDRI-x86 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-OpenMP-arm64Browse NuGet / Magick.NET-Q16-OpenMP-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-OpenMP-x64Browse NuGet / Magick.NET-Q16-OpenMP-x64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-arm64Browse NuGet / Magick.NET-Q16-arm64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-x64Browse NuGet / Magick.NET-Q16-x64 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q16-x86Browse NuGet / Magick.NET-Q16-x86 | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
Magick.NET-Q8-AnyCPUBrowse NuGet / Magick.NET-Q8-AnyCPU | GitHub Advisory | Before 14.15.0 · Fixed in 14.15.0 | affected |
References
3github.com
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh github.com
https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0