GHSA-V3J6-27VC-7PW2

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

Title source: GitHub Advisory
STIX 2.1 vulnerability

Description

Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path.

Description source: GitHub Advisory

Affected products and versions

Showing 12 of 17
ProductSourceVersion range

Magick.NET-Q16-AnyCPU

Browse NuGet / Magick.NET-Q16-AnyCPU
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-HDRI-AnyCPU

Browse NuGet / Magick.NET-Q16-HDRI-AnyCPU
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-HDRI-OpenMP-arm64

Browse NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-HDRI-arm64

Browse NuGet / Magick.NET-Q16-HDRI-arm64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-HDRI-x64

Browse NuGet / Magick.NET-Q16-HDRI-x64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-HDRI-x86

Browse NuGet / Magick.NET-Q16-HDRI-x86
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-OpenMP-arm64

Browse NuGet / Magick.NET-Q16-OpenMP-arm64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-OpenMP-x64

Browse NuGet / Magick.NET-Q16-OpenMP-x64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-arm64

Browse NuGet / Magick.NET-Q16-arm64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-x64

Browse NuGet / Magick.NET-Q16-x64
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q16-x86

Browse NuGet / Magick.NET-Q16-x86
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

Magick.NET-Q8-AnyCPU

Browse NuGet / Magick.NET-Q8-AnyCPU
GitHub AdvisoryBefore 14.15.0 · Fixed in 14.15.0affected

References

3