GHSA-wfx3-6g53-9fgc | Mondoo Vulnerability Intelligence

GHSA-wfx3-6g53-9fgc

LOW3.7

ImageMagick: Memory Leak in multiple coders that write raw pixel data

Published Feb 25, 2026

Modified 1 weeks ago

Fix available

Details

A memory leak vulnerability exists in multiple coders that write raw pixel data where an object is not freed.

Direct leak of 160 byte(s) in 1 object(s) allocated from:

Affected Packages(19 packages)

Magick.NET-Q16-AnyCPU

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-AnyCPU

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-OpenMP-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-OpenMP-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-HDRI-x86

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-arm64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-x64

NuGet

Fixed in:

14.10.3

Magick.NET-Q16-OpenMP-x86

NuGet

Fixed in:

14.10.3

References

PACKAGE

https://github.com/ImageMagick/ImageMagick

WEB

https://github.com/ImageMagick/ImageMagick/commit/fe0a49a58ac5b7a18ff2618b6207dcad71123e43

WEB

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wfx3-6g53-9fgc

ADVISORY

https://github.com/advisories/GHSA-wfx3-6g53-9fgc

WEB

https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3

CVSS Analysis

CVSS v3.1

3.7

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

LowA:L

3.7/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Ecosystems

NuGet

Timeline

PublishedFeb 25, 2026

ModifiedFeb 25, 2026