lowCVSS 2.9Vulnerability

GHSA-m596-67p7-69wh

When an allocation fails in the VIFF encoder a memory leak will occus.

Properties

ghsa_id
GHSA-m596-67p7-69wh
summary
ImageMagick: Memory leak in VIFF encoder when allocation fails
severity
low
cvss_score
2.9
cve_id
GHSA-m596-67p7-69wh
cvss_vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
is_ghsa_only
true
ghsa_published
2026-07-24T15:09:40Z
source_url
https://github.com/advisories/GHSA-m596-67p7-69wh
ghsa_updated
2026-07-24T15:09:41Z

Related Entities (36)

VULNERABLE_TO (17)

[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-x64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x86

AFFECTS (17)

[Software]nuget/Magick.NET-Q8-x64
[Software]nuget/Magick.NET-Q8-OpenMP-arm64
[Software]nuget/Magick.NET-Q8-x86
[Software]nuget/Magick.NET-Q16-HDRI-arm64
[Software]nuget/Magick.NET-Q8-OpenMP-x64
[Software]nuget/Magick.NET-Q8-arm64
[Software]nuget/Magick.NET-Q8-AnyCPU
[Software]nuget/Magick.NET-Q16-x86
[Software]nuget/Magick.NET-Q16-OpenMP-x64
[Software]nuget/Magick.NET-Q16-HDRI-x86
[Software]nuget/Magick.NET-Q16-AnyCPU
[Software]nuget/Magick.NET-Q16-arm64
[Software]nuget/Magick.NET-Q16-HDRI-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-HDRI-x64
[Software]nuget/Magick.NET-Q16-HDRI-AnyCPU
[Software]nuget/Magick.NET-Q16-OpenMP-arm64
[Software]nuget/Magick.NET-Q16-x64

HAS_WEAKNESS (1)

[Weakness]Missing Release of Memory after Effective Lifetime

REPORTED_BY (1)

[Source]GitHub Advisory Database

Explore deeper with Ninja Signal's threat intelligence graph