~ / search / GHSA-39h3-g67r-7g3c

GHSA-39h3-g67r-7g3c

ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-22770

Packages

EcosystemPackageAffectedFixed in
NuGet Magick.NET-Q8-x64 < 14.10.2 14.10.2
NuGet Magick.NET-Q8-arm64 < 14.10.2 14.10.2
NuGet Magick.NET-Q8-x86 < 14.10.2 14.10.2
NuGet Magick.NET-Q8-OpenMP-x64 < 14.10.2 14.10.2
NuGet Magick.NET-Q8-OpenMP-arm64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-x64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-arm64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-x86 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-OpenMP-x64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-OpenMP-arm64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-OpenMP-x86 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-HDRI-x64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-HDRI-arm64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-HDRI-x86 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-HDRI-OpenMP-x64 < 14.10.2 14.10.2
NuGet Magick.NET-Q16-HDRI-OpenMP-arm64 < 14.10.2 14.10.2
NuGet Magick.NET-Q8-AnyCPU < 14.10.2 14.10.2
NuGet Magick.NET-Q16-AnyCPU < 14.10.2 14.10.2
NuGet Magick.NET-Q16-HDRI-AnyCPU < 14.10.2 14.10.2

Details

As written in the advisory (Markdown source, shown as plain text).

The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But the last element in the set is not properly initialized. This will result in a release of an invalid pointer inside DestroyBilateralTLS when the memory allocation fails.

References

External links from the advisory. They lead to third-party sites.