3.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-wfx3-6g53-9fgc

GHSA-wfx3-6g53-9fgc: ImageMagick: Memory Leak in multiple coders that write raw pixel data

A memory leak vulnerability exists in multiple coders that write raw pixel data where an object is not freed.

Direct leak of 160 byte(s) in 1 object(s) allocated from:

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-wfx3-6g53-9fgc

GHSA-wfx3-6g53-9fgc:

3.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
Magick.NET-Q16-AnyCPU	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-HDRI-AnyCPU	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-HDRI-OpenMP-arm64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-HDRI-OpenMP-x64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-HDRI-arm64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-HDRI-x64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-HDRI-x86	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-OpenMP-arm64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-OpenMP-x64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-OpenMP-x86	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-arm64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-x64	nuget	< 14.10.3	14.10.3
Magick.NET-Q16-x86	nuget	< 14.10.3	14.10.3
Magick.NET-Q8-AnyCPU	nuget	< 14.10.3	14.10.3
Magick.NET-Q8-OpenMP-arm64	nuget	< 14.10.3	14.10.3
Magick.NET-Q8-OpenMP-x64	nuget	< 14.10.3	14.10.3
Magick.NET-Q8-arm64	nuget	< 14.10.3	14.10.3
Magick.NET-Q8-x64	nuget	< 14.10.3	14.10.3
Magick.NET-Q8-x86	nuget	< 14.10.3	14.10.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a memory leak in multiple image coders within ImageMagick that write raw pixel data. The analysis of the provided patch commit fe0a49a58ac5b7a18ff2618b6207dcad71123e43 reveals that in several Write*Image functions (specifically WriteBGRImage, WriteCMYKImage, WriteGRAYImage, WriteRGBImage, and WriteYCBCRImage), a quantum_info object is allocated. In error scenarios where OpenBlob fails to open the image for writing, the functions would previously return without deallocating the quantum_info object. This would result in a memory leak. The patch rectifies this by adding a call to DestroyQuantumInfo(quantum_info) before the early return in the error handling block. Therefore, the identified functions are considered vulnerable as they are the ones where the memory leak occurs when processing a crafted image that triggers the error condition.

Vulnerable functions

WriteBGRImage

coders/bgr.c

In `WriteBGRImage`, if `OpenBlob` fails, the function returns without freeing the `quantum_info` object, leading to a memory leak. The patch adds a call to `DestroyQuantumInfo` to fix this.

WriteCMYKImage

coders/cmyk.c

In `WriteCMYKImage`, if `OpenBlob` fails, the function returns without freeing the `quantum_info` object, leading to a memory leak. The patch adds a call to `DestroyQuantumInfo` to fix this.

WriteGRAYImage

coders/gray.c

In `WriteGRAYImage`, if `OpenBlob` fails, the function returns without freeing the `quantum_info` object, leading to a memory leak. The patch adds a call to `DestroyQuantumInfo` to fix this.

WriteRGBImage

coders/rgb.c

In `WriteRGBImage`, if `OpenBlob` fails, the function returns without freeing the `quantum_info` object, leading to a memory leak. The patch adds a call to `DestroyQuantumInfo` to fix this.

WriteYCBCRImage

coders/ycbcr.c

In `WriteYCBCRImage`, if `OpenBlob` fails, the function returns without freeing the `quantum_info` object, leading to a memory leak. The patch adds a call to `DestroyQuantumInfo` to fix this.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.