Magick.NET-Q16-AnyCPU vulnerabilities

CVEs whose affected-version data names the Magick.NET-Q16-AnyCPU package (nuget, rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

Magick.NET-Q16-AnyCPU vulnerabilities

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments

ImageMagick: Memory Leak in wand option parser when providing invalid arguments

ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails

ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method

ImageMagick has an Infinite Loop in subimage-search with crafted image

ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems

ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions

ImageMagick: Policy Bypass can read disallowed files via symlink

ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition

ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop

ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts

libwebp: OOB write in BuildHuffmanTable