lowCVSS 3.7Vulnerability

GHSA-h58x-r7f7-rh84

A memory leak will occur in the ICON decoder when an allocation fails.

Properties

ghsa_id
GHSA-h58x-r7f7-rh84
summary
ImageMagick: Memory Leak in ICON decoder when allocation fails
severity
low
cvss_score
3.7
cve_id
GHSA-h58x-r7f7-rh84
cvss_vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
is_ghsa_only
true
ghsa_published
2026-07-24T15:12:18Z
source_url
https://github.com/advisories/GHSA-h58x-r7f7-rh84
ghsa_updated
2026-07-24T15:12:20Z

Related Entities (36)

HAS_WEAKNESS (1)

[Weakness]Missing Release of Memory after Effective Lifetime

REPORTED_BY (1)

[Source]GitHub Advisory Database

VULNERABLE_TO (17)

[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x86

AFFECTS (17)

[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-x86

Explore deeper with Ninja Signal's threat intelligence graph