Threats tagged 'ghsa-hm4x-r5hc-794f'

A heap buffer overflow vulnerability exists in the InterpretImageFilename function of ImageMagick, triggered by processing format strings with consecutive percent signs (%%). This off-by-one error leads to out-of-bounds memory access. The issue affects Magick.NET Q16 AnyCPU versions prior to 14.7.0. The vulnerability has a low CVSS score of 3.7 and does not impact integrity or availability. A fix is available in version 14.7.0.