Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26qp-ffjh-2x4v

Опубликовано: 13 апр. 2026
Источник: github
Github: Прошло ревью
CVSS3: 5.1

Описание

ImageMagick has an integer overflow in despeckle operation causing a heap buffer overflow on 32-bit builds

An integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write.

==1551685==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xea2fb818 at pc 0x56cbc42a bp 0xffc4ce48 sp 0xffc4ce38 WRITE of size 8 at 0xea2fb818 thread T0

Пакеты

Наименование

Magick.NET-Q16-AnyCPU

nuget
Затронутые версииВерсия исправления

< 14.12.0

14.12.0

Наименование

Magick.NET-Q16-HDRI-AnyCPU

nuget
Затронутые версииВерсия исправления

< 14.12.0

14.12.0

Наименование

Magick.NET-Q16-HDRI-x86

nuget
Затронутые версииВерсия исправления

< 14.12.0

14.12.0

Наименование

Magick.NET-Q16-x86

nuget
Затронутые версииВерсия исправления

< 14.12.0

14.12.0

Наименование

Magick.NET-Q8-AnyCPU

nuget
Затронутые версииВерсия исправления

< 14.12.0

14.12.0

Наименование

Magick.NET-Q8-x86

nuget
Затронутые версииВерсия исправления

< 14.12.0

14.12.0

EPSS

Процентиль: 4%
0.00148
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-190
CWE-787

Связанные уязвимости

CVSS3: 5.1
ubuntu
4 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

CVSS3: 5
redhat
4 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

CVSS3: 5.1
nvd
4 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

CVSS3: 5.1
debian
4 месяца назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 5.5
redos
около 1 месяца назад

Уязвимость ImageMagick

EPSS

Процентиль: 4%
0.00148
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-190
CWE-787