Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Magick.NET-Q16-AnyCPU | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-AnyCPU | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-OpenMP-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-x86 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-OpenMP-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-OpenMP-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-x86 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-AnyCPU | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-OpenMP-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-OpenMP-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-arm64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-x64 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q8-x86 | nuget | < 14.15.0 | 14.15.0 |
| Magick.NET-Q16-HDRI-arm64 | nuget | < 14.15.0 | 14.15.0 |
Miggo AIRoot Cause AnalysisThe vulnerability is a memory leak in the TIFF encoder of ImageMagick, specifically when handling GROUP4 compressed TIFF images. The analysis of the patch linked in the security advisory GHSA-6vxp-gfwf-hcr9 reveals that the function WriteGROUP4Image in coders/tiff.c is the source of the vulnerability. The patch adds a call to DestroyImage(huffman_image) in an error handling block that is executed when the creation of a temporary file fails. This indicates that prior to the patch, if the temporary file creation failed, the function would exit without releasing the memory allocated for huffman_image, resulting in a memory leak. Therefore, any runtime profile during an exploit of this vulnerability would show the WriteGROUP4Image function.
WriteGROUP4Imagecoders/tiff.c