lowVulnerability

GHSA-3q5f-gmjc-38r8

If a `texture` attribute is specified for a TXT file, an attempt will be made to read it via `texture=ReadImage(read_info,exception);`. Later, when retrieving metrics via the `GetTypeMetrics` function, if this function fails (i.e., `status == MagickFalse`), the calling function will exit immediately but fail to release the texture object, leading to memory leakage.

Properties

ghsa_id
GHSA-3q5f-gmjc-38r8
severity
low
summary
ImageMagick: Memory leak in coders/txt.c without freetype
cve_id
GHSA-3q5f-gmjc-38r8
cvss_vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
is_ghsa_only
true
ghsa_published
2026-02-25T19:13:08Z
source_url
https://github.com/advisories/GHSA-3q5f-gmjc-38r8
ghsa_updated
2026-02-25T19:13:09Z

Related Entities (21)

AFFECTS (19)

[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-OpenMP-x86
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-x64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q16-OpenMP-x64

HAS_WEAKNESS (1)

[Weakness]Missing Release of Memory after Effective Lifetime

REPORTED_BY (1)

[Source]GitHub Advisory Database

Explore deeper with Ninja Signal's threat intelligence graph

GHSA-3q5f-gmjc-38r8 — Ninja Signal Threat Intelligence | Ninja Signal