deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-OpenMP-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-HDRI-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-782x-jh29-9mf7
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-401: Missing Release of Memory after Effective Lifetime
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

Details:
Sometimes msl.c fails to update the stack index, so an image is stored in the wrong slot and never freed on error, causing leaks.

```
==841485==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 13512 byte(s) in 1 object(s) allocated from:
    #0 0x7ff330759887 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:145
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q8-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q8-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-OpenMP-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-HDRI-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-42p5-62qq-mmh7
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has a heap buffer over-read in its MAP image decoder

Details:
A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding.

```
=================================================================
==4070926==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000002b31 at pc 0x56517afbd910 bp 0x7ffc59e90000 sp 0x7ffc59e8fff0
READ of size 1 at 0x502000002b31 thread T0
```
GitHub Security Advisory: GHSA-v7g2-m8c5-mf84
Package: Magick.NET-Q8-x86 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling, CWE-789: Memory Allocation with Excessive Size Value
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

Details:
A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort.

Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer.
GitHub Security Advisory: GHSA-v7g2-m8c5-mf84
Package: Magick.NET-Q8-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling, CWE-789: Memory Allocation with Excessive Size Value
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

Details:
A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort.

Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer.
GitHub Security Advisory: GHSA-v7g2-m8c5-mf84
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling, CWE-789: Memory Allocation with Excessive Size Value
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

Details:
A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort.

Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer.
GitHub Security Advisory: GHSA-v7g2-m8c5-mf84
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling, CWE-789: Memory Allocation with Excessive Size Value
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

Details:
A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort.

Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer.
GitHub Security Advisory: GHSA-v7g2-m8c5-mf84
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling, CWE-789: Memory Allocation with Excessive Size Value
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder

Details:
A crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort.

Found via AFL++ fuzzing with afl-clang-lto instrumentation and AddressSanitizer.