mediumCVSS 6.9Vulnerability

GHSA-98cp-rj9f-6v5g

The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images.

Properties

ghsa_id
GHSA-98cp-rj9f-6v5g
severity
medium
summary
ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
cvss_score
6.9
cve_id
GHSA-98cp-rj9f-6v5g
cvss_vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
is_ghsa_only
true
ghsa_published
2026-04-14T23:31:52Z
source_url
https://github.com/advisories/GHSA-98cp-rj9f-6v5g
ghsa_updated
2026-04-16T15:16:08Z

Related Entities (38)

HAS_WEAKNESS (1)

[Weakness]Stack-based Buffer Overflow

REPORTED_BY (1)

[Source]GitHub Advisory Database

VULNERABLE_TO (18)

[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-x64
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU

AFFECTS (18)

[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-x64
[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q16-OpenMP-x64

Explore deeper with Ninja Signal's threat intelligence graph

GHSA-98cp-rj9f-6v5g (CVSS 6.9) — Ninja Signal Threat Intelligence | Ninja Signal