Lookup for vulnerable packages by Package URL.
| Purl | pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.10.2 |
| Type | nuget |
| Namespace | |
| Name | Magick.NET-Q8-OpenMP-x64 |
| Version | 14.10.2 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | false |
| Next_non_vulnerable_version | 14.10.3 |
| Latest_non_vulnerable_version | 14.13.1 |
| Affected_by_vulnerabilities |
|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-53qa-r9wk-8uhy |
| vulnerability_id |
VCID-53qa-r9wk-8uhy |
| summary |
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
Stack overflow via infinite recursion in MSL (Magick Scripting Language) `<write>` command when writing to MSL format. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-23874, GHSA-9vj4-wc7r-p844
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-53qa-r9wk-8uhy |
|
| 1 |
| url |
VCID-7sxq-bg17-v3bx |
| vulnerability_id |
VCID-7sxq-bg17-v3bx |
| summary |
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But the last element in the set is not properly initialized. This will result in a release of an invalid pointer inside DestroyBilateralTLS when the memory allocation fails. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-22770, GHSA-39h3-g67r-7g3c
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7sxq-bg17-v3bx |
|
| 2 |
| url |
VCID-a8bq-4d3d-97gd |
| vulnerability_id |
VCID-a8bq-4d3d-97gd |
| summary |
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
NULL pointer dereference in MSL (Magick Scripting Language) parser when processing `<comment>` tag before any image is loaded. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2026-23952, GHSA-5vx3-wx4q-6cj8
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a8bq-4d3d-97gd |
|
| 3 |
| url |
VCID-kwru-mwnh-9yac |
| vulnerability_id |
VCID-kwru-mwnh-9yac |
| summary |
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
A memory leak vulnerability exists in the `LoadOpenCLDeviceBenchmark()` function in `MagickCore/opencl.c`. When parsing a malformed OpenCL device profile XML file that contains `<device` elements without proper `/>` closing tags, the function fails to release allocated memory for string members (`platform_name`, `vendor_name`, `name`, `version`), leading to memory leaks that could result in resource exhaustion.
**Affected Version**: ImageMagick 7.1.2-12 and possibly earlier versions
--- |
| references |
|
| fixed_packages |
|
| aliases |
GHSA-qp59-x883-77qv
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kwru-mwnh-9yac |
|
|
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:nuget/Magick.NET-Q8-OpenMP-x64@14.10.2 |