Launch Week Day 1: Announcing Security Design Review
LOW 3.7 NuGet

ImageMagick has a possible heap Use After Free vulnerability in its meta coder

GHSA-2gq3-ww97-wfjm

Published ยท Modified

Description

A heap Use After Free vulnerability exists in the meta coder when an allocation fails and a single byte is written to a stale pointer.

==535852==ERROR: AddressSanitizer: heap-use-after-free on address 0x5210000088ff at pc 0x5581bacac14d bp 0x7ffdf667edf0 sp 0x7ffdf667ede0
WRITE of size 1 at 0x5210000088ff thread T0

Ready to move

Start Securing

Free, no credit card | First findings in minutes