A crafted MSL image can trigger a heap-use-after-free.
{ "github_reviewed_at": "2026-05-18T20:37:22Z", "github_reviewed": true, "severity": "MODERATE", "nvd_published_at": null, "cwe_ids": [ "CWE-416" ] }
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-5r4x-w6p5-222q/GHSA-5r4x-w6p5-222q.json"