ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing

Description

==1200284==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x5100000002d0 at pc 0x59e28e60c27a bp 0x7fff047fd8e0 sp 0x7fff047fd8d0
READ of size 4 at 0x5100000002d0 thread T0

References

• ImageMagick/ImageMagick security advisory · WEB
• ImageMagick/ImageMagick · PACKAGE
• vulncheck.com/advisories/imagemagick-heap-buffer-overflow-via-off-by-one-in-morphology-processing · Third Party Advisory

Altre vulnerabilità di Magick.NET-Q16-AnyCPU

• CVE-2026-62946MEDIO 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2…
• CVE-2026-62363MEDIO 5.0ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer …
• CVE-2026-62343MEDIO 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 an…
• CVE-2026-66011BASSO 3.3ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Att…
• GHSA-hc76-7mpc-qjqhMEDIO 5.7ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797