Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability is a heap buffer overwrite in the JP2 encoder of ImageMagick. The analysis started by examining the provided reference URLs. The Magick.NET release notes confirmed that the vulnerability was fixed in ImageMagick version 7.1.2-26. By comparing the git tags for versions 7.1.2-25 and 7.1.2-26 of the ImageMagick/ImageMagick repository, a specific commit was identified with the message linking to the GHSA advisory GHSA-c4v7-w88g-m6c4. The commit details show a one-line change in the WriteJP2Image function within the coders/jp2.c file. The patch corrects a calculation error where subsampling_dx was used instead of subsampling_dy for the y-dimension, which could lead to writing data out of bounds. Therefore, the WriteJP2Image function is identified as the vulnerable function.
WriteJP2Imagecoders/jp2.c
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Magick.NET-Q16-AnyCPU | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-AnyCPU | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-OpenMP-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-x86 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-OpenMP-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-OpenMP-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-x86 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-AnyCPU | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-OpenMP-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-OpenMP-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-x86 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-arm64 | nuget | < 14.15.0 | 14.15.0 |