{"id":"GHSA-98gv-6gmj-cm6m","title":"Duplicate Advisory: ImageMagick: Memory leak in coders/txt.c without freetype","summary":"Duplicate Advisory: ImageMagick: Memory leak in coders/txt.c without freetype","severity":"low","cwe":["CWE-401"],"vendor":"Magick","product":"Magick.NET-Q16-AnyCPU","ecosystem":"nuget","affected":["Magick.NET-Q16-AnyCPU < 14.10.3"],"patched":["Magick.NET-Q16-AnyCPU 14.10.3"],"published":"2026-06-23","updated":"2026-09-24","sourceUpdated":"2026-09-24T20:02:48Z","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-98gv-6gmj-cm6m","references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3q5f-gmjc-38r8"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56371"},{"url":"https://www.vulncheck.com/advisories/imagemagick-memory-leak-in-txt-file-processing-via-texture-attribute"},{"url":"https://github.com/advisories/GHSA-98gv-6gmj-cm6m"}],"tags":["ghsa","nuget"],"ingestedAt":"2026-09-24T20:51:40.263Z","slug":"GHSA-98gv-6gmj-cm6m","body":"## Overview\n\n### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-3q5f-gmjc-38r8. This link is maintained to preserve external references.\n\n### Original Description\nImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is not released when GetTypeMetrics fails, leaking memory each time a crafted TXT file with a texture attribute is processed.\n\n## Affected packages\n\n- `Magick.NET-Q16-AnyCPU < 14.10.3`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `Magick.NET-Q16-AnyCPU 14.10.3`","depth":"sunlit","depthScore":14,"depthScoreParts":{"impact":13.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}