| Package | Affected versions | Patched versions |
|---|---|---|
| Magick.NET-Q16-AnyCPU | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-AnyCPU | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-OpenMP-arm64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-OpenMP-x64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-arm64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-x64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-HDRI-x86 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-OpenMP-arm64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-OpenMP-x64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-OpenMP-x86 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-arm64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-x64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q16-x86 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-AnyCPU | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-OpenMP-arm64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-OpenMP-x64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-arm64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-x64 | < 14.10.3 | 14.10.3 |
| Magick.NET-Q8-x86 | < 14.10.3 | 14.10.3 |
| imagemagick | ≥ 7.0.0-0, < 7.1.2-15< 6.9.13-40 | 7.1.2-156.9.13-40 |
A heap buffer overflow write vulnerability exists in ReadYUVImage() (coders/yuv.c) when processing malicious YUV 4:2:2 (NoInterlace) images. The pixel-pair loop writes one pixel beyond the allocated row buffer.
=================================================================
==204642==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5170000002e0 at pc 0x562d21a7e8de bp 0x7fffa9ae1270 sp 0x7fffa9ae1260
WRITE of size 8 at 0x5170000002e0 thread T0
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free