Search for packages
| purl | pkg:nuget/Magick.NET-Q8-x64@14.10.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-53qa-r9wk-8uhy | ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript Stack overflow via infinite recursion in MSL (Magick Scripting Language) `<write>` command when writing to MSL format. |
CVE-2026-23874
GHSA-9vj4-wc7r-p844 |
| VCID-7sxq-bg17-v3bx | ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But the last element in the set is not properly initialized. This will result in a release of an invalid pointer inside DestroyBilateralTLS when the memory allocation fails. |
CVE-2026-22770
GHSA-39h3-g67r-7g3c |
| VCID-a8bq-4d3d-97gd | ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load NULL pointer dereference in MSL (Magick Scripting Language) parser when processing `<comment>` tag before any image is loaded. |
CVE-2026-23952
GHSA-5vx3-wx4q-6cj8 |
| VCID-kwru-mwnh-9yac | ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML A memory leak vulnerability exists in the `LoadOpenCLDeviceBenchmark()` function in `MagickCore/opencl.c`. When parsing a malformed OpenCL device profile XML file that contains `<device` elements without proper `/>` closing tags, the function fails to release allocated memory for string members (`platform_name`, `vendor_name`, `name`, `version`), leading to memory leaks that could result in resource exhaustion. **Affected Version**: ImageMagick 7.1.2-12 and possibly earlier versions --- |
GHSA-qp59-x883-77qv
|