deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-x86 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-pcvx-ph33-r5vv
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-125: Out-of-bounds Read
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has an out-of-bounds read in sample operation

Details:
The -sample operation has an out of bounds read when an specific offset is set through the `sample:offset` define that could lead to an out of bounds read.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q8-x86 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q8-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-x86 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-f4qm-vj5j-9xpw
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary:  ImageMagick has a Stack Overflow via Recursive FX Expression Parsing

Details:
A stack overflow vulnerability in ImageMagick's FX expression parser allows an attacker to crash the process by providing a deeply nested expression.
GitHub Security Advisory: GHSA-4f7c-pmjv-c25w
Package: log4net (NUGET)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-116: Improper Encoding or Escaping of Output
Vulnerable versions: < 3.3.0
Patched in: 3.3.0

Summary: Apache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters

Details:
Apache Log4net's  XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list  and  XmlLayoutSchemaLog4J https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list , in versions before 3.3.0, fail to sanitize characters forbidden by the  XML 1.0 specification https://www.w3.org/TR/xml/#charsets  in MDC property keys and values, as well as the identity field that may carry attacker-influenced data. This causes an exception during serialization and the silent loss of the affected log event.

An attacker who can influence any of these fields can exploit this to suppress individual log records, impairing audit trails and detection of malicious activity.

Users are advised to upgrade to Apache Log4net 3.3.0, which fixes this issue.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q8-x86 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q8-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q8-OpenMP-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q8-AnyCPU (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-x86 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-OpenMP-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-OpenMP-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-HDRI-x86 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-HDRI-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-HDRI-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-HDRI-OpenMP-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-HDRI-AnyCPU (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-x9h5-r9v2-vcww
Package: Magick.NET-Q16-AnyCPU (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-122: Heap-based Buffer Overflow
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

Details:
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
GitHub Security Advisory: GHSA-fwvm-ggf6-2p4x
Package: Magick.NET-Q8-x86 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a Stack Overflow in DestroyXMLTree()

Details:
Magick frees the memory of the XML tree via the `DestroyXMLTree` function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service (DoS) attack.
GitHub Security Advisory: GHSA-fwvm-ggf6-2p4x
Package: Magick.NET-Q8-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a Stack Overflow in DestroyXMLTree()

Details:
Magick frees the memory of the XML tree via the `DestroyXMLTree` function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service (DoS) attack.
GitHub Security Advisory: GHSA-fwvm-ggf6-2p4x
Package: Magick.NET-Q8-arm64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a Stack Overflow in DestroyXMLTree()

Details:
Magick frees the memory of the XML tree via the `DestroyXMLTree` function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service (DoS) attack.
GitHub Security Advisory: GHSA-fwvm-ggf6-2p4x
Package: Magick.NET-Q8-OpenMP-x64 (NUGET)
Severity: HIGH (CVSS 7.5)
CWE: CWE-674: Uncontrolled Recursion
Vulnerable versions: < 14.12.0
Patched in: 14.12.0

Summary: ImageMagick has a Stack Overflow in DestroyXMLTree()

Details:
Magick frees the memory of the XML tree via the `DestroyXMLTree` function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service (DoS) attack.