ImageMagick has memory leak in msl encoder

概要

==78983== Memcheck, a memory error detector
==78983== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al.
==78983== Using Valgrind-3.22.0 and LibVEX; rerun with -h for copyright info
==78983== 
==78983== 177,196 (13,512 direct, 163,684 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 21
==78983==    at 0x4846828: malloc (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)

参考情報

• ImageMagick/ImageMagick security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-25638 · ADVISORY
• ImageMagick/ImageMagick commit 1e88fca · WEB
• ImageMagick/ImageMagick · PACKAGE
• dlemstra/Magick.NET release 14.10.3 · WEB

Magick.NET-Q16-AnyCPU のその他の脆弱性

• CVE-2026-62946中 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2…
• CVE-2026-62363中 5.0ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer …
• CVE-2026-62343中 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 an…
• CVE-2026-66011低 3.3ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Att…
• GHSA-hc76-7mpc-qjqh中 5.7ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797