Executive brief
ImageMagick is vulnerable to an integer overflow in its despeckle operation on 32-bit builds, leading to a heap buffer overflow and out-of-bounds write.
Affected products
- NuGet Magick.NET-Q16-AnyCPU
- NuGet Magick.NET-Q16-HDRI-AnyCPU
- NuGet Magick.NET-Q8-x86
- NuGet Magick.NET-Q8-AnyCPU
- NuGet Magick.NET-Q16-HDRI-x86
- NuGet Magick.NET-Q16-x86
References
- https://api.github.com/users/shitianyu-2004
- https://github.com/shitianyu-2004
- https://api.github.com/users/shitianyu-2004/gists%7B/gist_id%7D
- https://api.github.com/users/shitianyu-2004/repos
- https://avatars.githubusercontent.com/u/238960946?v=4
- https://api.github.com/users/shitianyu-2004/events%7B/privacy%7D