ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

Description

==1575126==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x7fc382ef3820 at pc 0x5560d31f229f bp 0x7ffe865f9530 sp 0x7ffe865f9520
WRITE of size 8 at 0x7fc382ef3820 thread T0
    #0 0x5560d31f229e in WriteUHDRImage coders/uhdr.c:807

References

• ImageMagick/ImageMagick security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-25794 · ADVISORY
• ImageMagick/ImageMagick commit ffe589d · WEB
• ImageMagick/ImageMagick · PACKAGE
• dlemstra/Magick.NET release 14.10.3 · WEB
• access.redhat.com/security/cve/CVE-2026-25794
• bugzilla.redhat.com/show_bug.cgi
• security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25794.json

Mais vulnerabilidades de Magick.NET-Q16-AnyCPU

• CVE-2026-62946MÉDIO 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2…
• CVE-2026-62363MÉDIO 5.0ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-27, a heap buffer …
• CVE-2026-62343MÉDIO 4.7ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 6.9.13-51 and 7.0.1-0 an…
• CVE-2026-66011BAIXO 3.3ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Att…
• GHSA-hc76-7mpc-qjqhMÉDIO 5.7ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797