OSV - Open Source Vulnerabilities

GHSA-86vq-ccwf-rm62

NuGet/Umbraco.Engage.Forms

Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints

4 days ago

Fix available
Severity - 7.5 (High)

GHSA-r99p-5442-q2x2

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

6 days ago

Fix available
Severity - 4.0 (Medium)

GHSA-qpgx-jfcq-r59f

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

6 days ago

Fix available
Severity - 4.0 (Medium)

GHSA-gq5v-qf8q-fp77

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization

6 days ago

Fix available
Severity - 3.3 (Low)

GHSA-wfx3-6g53-9fgc

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Memory Leak in multiple coders that write raw pixel data

6 days ago

Fix available
Severity - 3.7 (Low)

GHSA-3q5f-gmjc-38r8

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Memory leak in coders/txt.c without freetype

6 days ago

Fix available

GHSA-xpg8-7m6m-jf56

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: SVG-to-MVG Command Injection via coders/svg.c

6 days ago

Fix available

GHSA-wgxp-q8xq-wpp9

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

6 days ago

Fix available
Severity - 3.7 (Low)

GHSA-3j4x-rwrx-xxj9

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

mageMagick has a possible use-after-free write in its PDB decoder

6 days ago

Fix available
Severity - 3.7 (Low)

GHSA-2gq3-ww97-wfjm

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 12 more

ImageMagick has a possible heap Use After Free vulnerability in its meta coder

6 days ago

Fix available
Severity - 3.7 (Low)

GHSA-273h-m46v-96q4

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds

6 days ago

Fix available
Severity - 3.7 (Low)

GHSA-w8mw-frc6-r7m8

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Invalid MSL <map> can result in a use after free

24 Feb

Fix available
Severity - 5.3 (Medium)

GHSA-gwr3-x37h-h84v

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`

24 Feb

Fix available
Severity - 6.2 (Medium)

GHSA-v994-63cg-9wj3

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

24 Feb

Fix available
Severity - 6.2 (Medium)

GHSA-7355-pwx2-pm84

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 14 more

ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

24 Feb

Fix available
Severity - 7.5 (High)

GHSA-782x-jh29-9mf7

NuGet/Magick.NET-Q16-AnyCPU
NuGet/Magick.NET-Q16-HDRI-AnyCPU
NuGet/Magick.NET-Q16-HDRI-OpenMP-arm64
NuGet/Magick.NET-Q16-HDRI-OpenMP-x64
NuGet/Magick.NET-Q16-HDRI-arm64
... 13 more

ImageMagick: MSL image stack index may fail to refresh, leading to leaked images

24 Feb

Fix available
Severity - 5.3 (Medium)