deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-OpenMP-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-mqfc-82jx-3mr2
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

Details:
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.

```
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x[PII_REDACTED]e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x[PII_REDACTED]e0 thread T0
```
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q8-x86 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q8-x64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-HDRI-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-x86 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-x64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-OpenMP-x86 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-pmq6-8289-hx3v
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Details:
A heap out-of-bounds read vulnerability exists in the `coders/dcm.c` module. When processing DICOM files with a specific configuration, the decoder loop incorrectly reads bytes per iteration. This causes the function to read past the end of the allocated buffer, potentially leading to a Denial of Service (crash) or Information Disclosure (leaking heap memory into the image).
GitHub Security Advisory: GHSA-8mpr-6xr2-chhc
Package: Magick.NET-Q8-x86 (NUGET)
Severity: MODERATE (CVSS 6.2)
CWE: CWE-674: Uncontrolled Recursion, CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL - Stack overflow in ProcessMSLScript

Details:
### Summary
Magick fails to check for circular references between two MSLs, leading to a stack overflow.

### Details
After reading a.msl using magick, the following is displayed:

`MSLStartElement` -> `ReadImage` -> `ReadMSLImage` -> `ProcessMSLScript` -> `xmlParseChunk` -> `xmlParseTryOrFinish` -> `MSLStartElement`

```bash
AddressSanitizer:DEADLYSIGNAL
=================================================================
==114345==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x72509fc7d804 bp 0x7ffd6598b390 sp 0x7ffd6598ab20 T0)
    #0 0x72509fc7d804 in strlen ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:388
[...]
```
GitHub Security Advisory: GHSA-8mpr-6xr2-chhc
Package: Magick.NET-Q8-x64 (NUGET)
Severity: MODERATE (CVSS 6.2)
CWE: CWE-674: Uncontrolled Recursion, CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL - Stack overflow in ProcessMSLScript

Details:
### Summary
Magick fails to check for circular references between two MSLs, leading to a stack overflow.

### Details
After reading a.msl using magick, the following is displayed:

`MSLStartElement` -> `ReadImage` -> `ReadMSLImage` -> `ProcessMSLScript` -> `xmlParseChunk` -> `xmlParseTryOrFinish` -> `MSLStartElement`

```bash
AddressSanitizer:DEADLYSIGNAL
=================================================================
==114345==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x72509fc7d804 bp 0x7ffd6598b390 sp 0x7ffd6598ab20 T0)
    #0 0x72509fc7d804 in strlen ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:388
[...]
```
GitHub Security Advisory: GHSA-8mpr-6xr2-chhc
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: MODERATE (CVSS 6.2)
CWE: CWE-674: Uncontrolled Recursion, CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL - Stack overflow in ProcessMSLScript

Details:
### Summary
Magick fails to check for circular references between two MSLs, leading to a stack overflow.

### Details
After reading a.msl using magick, the following is displayed:

`MSLStartElement` -> `ReadImage` -> `ReadMSLImage` -> `ProcessMSLScript` -> `xmlParseChunk` -> `xmlParseTryOrFinish` -> `MSLStartElement`

```bash
AddressSanitizer:DEADLYSIGNAL
=================================================================
==114345==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x72509fc7d804 bp 0x7ffd6598b390 sp 0x7ffd6598ab20 T0)
    #0 0x72509fc7d804 in strlen ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:388
[...]
```
GitHub Security Advisory: GHSA-8mpr-6xr2-chhc
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 6.2)
CWE: CWE-674: Uncontrolled Recursion, CWE-787: Out-of-bounds Write
Vulnerable versions: < 14.10.3
Patched in: 14.10.3

Summary: ImageMagick: MSL - Stack overflow in ProcessMSLScript

Details:
### Summary
Magick fails to check for circular references between two MSLs, leading to a stack overflow.

### Details
After reading a.msl using magick, the following is displayed:

`MSLStartElement` -> `ReadImage` -> `ReadMSLImage` -> `ProcessMSLScript` -> `xmlParseChunk` -> `xmlParseTryOrFinish` -> `MSLStartElement`

```bash
AddressSanitizer:DEADLYSIGNAL
=================================================================
==114345==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x[PII_REDACTED]00 (pc 0x72509fc7d804 bp 0x7ffd6598b390 sp 0x7ffd6598ab20 T0)
    #0 0x72509fc7d804 in strlen ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:388
[...]
```