3 matches found
Missing Release of Memory after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the TIFF encoder when memory allocation fails. An attacker can cause memory exhaustion and disrupt service availability by triggering allocation failures during TIFF image processing...
Insecure Randomness
Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the FTXT encoder when parsing the ftxt:format parameter. An attacker can cause a denial of service by supplying a specially crafted input file that triggers an out-of-bounds read. Remediation A fix was pushed into...