logo

Database

Improper resource allocation In magick.net-q16-anycpu

Description

ImageMagick: Policy Bypass possible with matrix-backed operations Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 17

10

Aliases

1. GHSA-rvhp-75f6-9jqh2. GCVE-GHSA-rvhp-75f6-9jqh

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvhp-75f6-9jqh2. https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.