MEDIUMCVSS 6.3

GHSA-8g9f-ccmr-vfvg

Duplicate Advisory: ImageMagick has a possible heap Use After Free vulnerability in its meta coder

Published: 2026-06-23
Modified: 2026-09-24
Sources: github-advisory

Summary

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2gq3-ww97-wfjm. This link is maintained to preserve external references. ### Original Description ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it by processing specially crafted image files, causing a denial of service.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
NuGet	Magick.NET-Q16-AnyCPU	—	14.10.3

Remediation: Upgrade to 14.10.3 or later.

References

https://github.com/advisories/GHSA-8g9f-ccmr-vfvg

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.