deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-p863-5fgm-rgq4
Package: Magick.NET-Q16-HDRI-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-476: NULL Pointer Dereference
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

Details:
A NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in Denial of Service.

```
AddressSanitizer:DEADLYSIGNAL
=================================================================
==3704942==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x7f9d141239e0 bp 0x7ffd4c5711e0 sp 0x7ffd4c571148 T0)
    #0 0x7f9d141239e0  (/lib/x86_64-linux-gnu/libc.so.6+0xc49e0)
    #1 0x558a25e4f08d in ClonePixelCacheRepository._omp_fn.0 MagickCore/cache.c:784
    #2 0x7f9d14c06a15 in GOMP_parallel (/lib/x86_64-linux-gnu/libgomp.so.1+0x14a15)
    #3 0x558a25e43151 in ClonePixelCacheRepository MagickCore/cache.c:753
    #4 0x558a25e49a96 in OpenPixelCache MagickCore/cache.c:3849
    #5 0x558a25e45117 in GetImagePixelCache MagickCore/cache.c:1829
    #6 0x558a25e4dde3 in SyncImagePixelCache MagickCore/cache.c:5647
    #7 0x558a256ba57d in SetImageExtent MagickCore/image.c:2713
```
GitHub Security Advisory: GHSA-p863-5fgm-rgq4
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-476: NULL Pointer Dereference
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

Details:
A NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in Denial of Service.

```
AddressSanitizer:DEADLYSIGNAL
=================================================================
==3704942==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x7f9d141239e0 bp 0x7ffd4c5711e0 sp 0x7ffd4c571148 T0)
    #0 0x7f9d141239e0  (/lib/x86_64-linux-gnu/libc.so.6+0xc49e0)
    #1 0x558a25e4f08d in ClonePixelCacheRepository._omp_fn.0 MagickCore/cache.c:784
    #2 0x7f9d14c06a15 in GOMP_parallel (/lib/x86_64-linux-gnu/libgomp.so.1+0x14a15)
    #3 0x558a25e43151 in ClonePixelCacheRepository MagickCore/cache.c:753
    #4 0x558a25e49a96 in OpenPixelCache MagickCore/cache.c:3849
    #5 0x558a25e45117 in GetImagePixelCache MagickCore/cache.c:1829
    #6 0x558a25e4dde3 in SyncImagePixelCache MagickCore/cache.c:5647
    #7 0x558a256ba57d in SetImageExtent MagickCore/image.c:2713
```
GitHub Security Advisory: GHSA-p863-5fgm-rgq4
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-476: NULL Pointer Dereference
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

Details:
A NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in Denial of Service.

```
AddressSanitizer:DEADLYSIGNAL
=================================================================
==3704942==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x7f9d141239e0 bp 0x7ffd4c5711e0 sp 0x7ffd4c571148 T0)
    #0 0x7f9d141239e0  (/lib/x86_64-linux-gnu/libc.so.6+0xc49e0)
    #1 0x558a25e4f08d in ClonePixelCacheRepository._omp_fn.0 MagickCore/cache.c:784
    #2 0x7f9d14c06a15 in GOMP_parallel (/lib/x86_64-linux-gnu/libgomp.so.1+0x14a15)
    #3 0x558a25e43151 in ClonePixelCacheRepository MagickCore/cache.c:753
    #4 0x558a25e49a96 in OpenPixelCache MagickCore/cache.c:3849
    #5 0x558a25e45117 in GetImagePixelCache MagickCore/cache.c:1829
    #6 0x558a25e4dde3 in SyncImagePixelCache MagickCore/cache.c:5647
    #7 0x558a256ba57d in SetImageExtent MagickCore/image.c:2713
```
GitHub Security Advisory: GHSA-p863-5fgm-rgq4
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-476: NULL Pointer Dereference
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

Details:
A NULL pointer dereference in ClonePixelCacheRepository allows a remote attacker to crash any application linked against ImageMagick by supplying a crafted image file, resulting in Denial of Service.

```
AddressSanitizer:DEADLYSIGNAL
=================================================================
==3704942==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x7f9d141239e0 bp 0x7ffd4c5711e0 sp 0x7ffd4c571148 T0)
    #0 0x7f9d141239e0  (/lib/x86_64-linux-gnu/libc.so.6+0xc49e0)
    #1 0x558a25e4f08d in ClonePixelCacheRepository._omp_fn.0 MagickCore/cache.c:784
    #2 0x7f9d14c06a15 in GOMP_parallel (/lib/x86_64-linux-gnu/libgomp.so.1+0x14a15)
    #3 0x558a25e43151 in ClonePixelCacheRepository MagickCore/cache.c:753
    #4 0x558a25e49a96 in OpenPixelCache MagickCore/cache.c:3849
    #5 0x558a25e45117 in GetImagePixelCache MagickCore/cache.c:1829
    #6 0x558a25e4dde3 in SyncImagePixelCache MagickCore/cache.c:5647
    #7 0x558a256ba57d in SetImageExtent MagickCore/image.c:2713
```
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q8-x86 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q8-x64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-x86 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-OpenMP-x86 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-HDRI-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-rw6c-xp26-225v
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.7)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Code Injection via PostScript header in ps coders

Details:
The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header.  An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed.

The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code.
GitHub Security Advisory: GHSA-g2pr-qxjg-7r2w
Package: Magick.NET-Q8-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

Details:
### Summary

In `ReadSTEGANOImage()` (`coders/stegano.c`), the `watermark` Image object is not freed on three early-return paths, resulting in a definite memory leak (~13.5KB+ per invocation) that can be exploited for denial of service.

```
Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7f5c11e27887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
    #1 0x55cdc38f65c4 in AcquireMagickMemory MagickCore/memory.c:536
    #2 0x55cdc38f65eb in AcquireCriticalMemory MagickCore/memory.c:612
    #3 0x55cdc3899e91 in AcquireImage MagickCore/image.c:154
```
GitHub Security Advisory: GHSA-g2pr-qxjg-7r2w
Package: Magick.NET-Q8-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

Details:
### Summary

In `ReadSTEGANOImage()` (`coders/stegano.c`), the `watermark` Image object is not freed on three early-return paths, resulting in a definite memory leak (~13.5KB+ per invocation) that can be exploited for denial of service.

```
Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7f5c11e27887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
    #1 0x55cdc38f65c4 in AcquireMagickMemory MagickCore/memory.c:536
    #2 0x55cdc38f65eb in AcquireCriticalMemory MagickCore/memory.c:612
    #3 0x55cdc3899e91 in AcquireImage MagickCore/image.c:154
```
GitHub Security Advisory: GHSA-g2pr-qxjg-7r2w
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

Details:
### Summary

In `ReadSTEGANOImage()` (`coders/stegano.c`), the `watermark` Image object is not freed on three early-return paths, resulting in a definite memory leak (~13.5KB+ per invocation) that can be exploited for denial of service.

```
Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7f5c11e27887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
    #1 0x55cdc38f65c4 in AcquireMagickMemory MagickCore/memory.c:536
    #2 0x55cdc38f65eb in AcquireCriticalMemory MagickCore/memory.c:612
    #3 0x55cdc3899e91 in AcquireImage MagickCore/image.c:154
```
GitHub Security Advisory: GHSA-g2pr-qxjg-7r2w
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

Details:
### Summary

In `ReadSTEGANOImage()` (`coders/stegano.c`), the `watermark` Image object is not freed on three early-return paths, resulting in a definite memory leak (~13.5KB+ per invocation) that can be exploited for denial of service.

```
Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7f5c11e27887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
    #1 0x55cdc38f65c4 in AcquireMagickMemory MagickCore/memory.c:536
    #2 0x55cdc38f65eb in AcquireCriticalMemory MagickCore/memory.c:612
    #3 0x55cdc3899e91 in AcquireImage MagickCore/image.c:154
```