VDB
KO
HIGH 7.5

GHSA-8pj9-6897-74xc

ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions

Details

A missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operations.

Are you affected?

Enter the version of the package you're using.

Affected packages

NuGet / Magick.NET-Q16-AnyCPU
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-AnyCPU --version 14.14.0
NuGet / Magick.NET-Q16-HDRI-AnyCPU
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-HDRI-AnyCPU --version 14.14.0
NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-HDRI-OpenMP-arm64 --version 14.14.0
NuGet / Magick.NET-Q16-HDRI-arm64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-HDRI-arm64 --version 14.14.0
NuGet / Magick.NET-Q16-HDRI-x64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-HDRI-x64 --version 14.14.0
NuGet / Magick.NET-Q16-HDRI-x86
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-HDRI-x86 --version 14.14.0
NuGet / Magick.NET-Q16-OpenMP-arm64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-OpenMP-arm64 --version 14.14.0
NuGet / Magick.NET-Q16-OpenMP-x64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-OpenMP-x64 --version 14.14.0
NuGet / Magick.NET-Q16-arm64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-arm64 --version 14.14.0
NuGet / Magick.NET-Q16-x64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-x64 --version 14.14.0
NuGet / Magick.NET-Q16-x86
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q16-x86 --version 14.14.0
NuGet / Magick.NET-Q8-AnyCPU
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q8-AnyCPU --version 14.14.0
NuGet / Magick.NET-Q8-OpenMP-arm64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q8-OpenMP-arm64 --version 14.14.0
NuGet / Magick.NET-Q8-OpenMP-x64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q8-OpenMP-x64 --version 14.14.0
NuGet / Magick.NET-Q8-arm64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q8-arm64 --version 14.14.0
NuGet / Magick.NET-Q8-x64
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q8-x64 --version 14.14.0
NuGet / Magick.NET-Q8-x86
Introduced in: 0 Fixed in: 14.14.0
Fix dotnet add package Magick.NET-Q8-x86 --version 14.14.0

References