logo

Database

Asymmetric denial of service In magick.net-q16-anycpu

Description

ImageMagick: Heap-use-after-free via XMP profile could result in a crash Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 17

10

Aliases

1. GHSA-qh5g-q395-cx4j2. GCVE-GHSA-qh5g-q395-cx4j

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j2. https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.