GHSA-h95r-c8c7-mrwx
ImageMagick has heap-based buffer overflow in UHDR encoder
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | Magick.NET-Q16-AnyCPU | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-HDRI-AnyCPU | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-HDRI-OpenMP-arm64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-HDRI-arm64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-HDRI-x64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-HDRI-x86 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-OpenMP-arm64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-OpenMP-x64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-OpenMP-x86 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-arm64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-x64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-x86 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q16-HDRI-OpenMP-x64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q8-AnyCPU | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q8-OpenMP-arm64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q8-OpenMP-x64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q8-arm64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q8-x64 | < 14.10.4 | 14.10.4 |
| NuGet | Magick.NET-Q8-x86 | < 14.10.4 | 14.10.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
A heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write.
```
================================================================
==2158399==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x521000039500 at pc 0x562a4a42f968 bp 0x7ffcca4ed6c0 sp 0x7ffcca4ed6b0
WRITE of size 1 at 0x521000039500 thread T0
```
References
External links from the advisory. They lead to third-party sites.