PkgSeer

Vulnerability GHSA-2gq3-ww97-wfjm

Low Risk
LOW RISK
CVSS Score: 3.7
Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
7 months ago
February 25, 2026 at 07:11 PM UTC
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
7.0.1 and 7.0.3 and 7.0.6 - 7.3.0 and 7.5.0 - 7.9.2 and 7.11.0 - 7.21.1 and 7.22.3 and 7.23.3 - 8.2.1 and 8.4.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1
7.0.1 and 7.0.3 and 7.0.6 - 7.3.0 and 7.5.0 - 7.9.2 and 7.11.0 - 7.21.1 and 7.22.3 and 7.23.3 - 8.2.1 and 8.4.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1

Summary

ImageMagick has a possible heap Use After Free vulnerability in its meta coder

Details

A heap Use After Free vulnerability exists in the meta coder when an allocation fails and a single byte is written to a stale pointer.

==535852==ERROR: AddressSanitizer: heap-use-after-free on address 0x5210000088ff at pc 0x5581bacac14d bp 0x7ffdf667edf0 sp 0x7ffdf667ede0
WRITE of size 1 at 0x5210000088ff thread T0

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Low Risk
25 days ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
25 days ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
25 days ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
25 days ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
25 days ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 11.0.0 and 11.2.0 - 12.1.0 and 12.3.0 - 13.0.1 and 13.2.0 - 14.7.0 and 14.9.0 - 14.9.1 and 14.11.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
7 months ago
February 25, 2026 at 07:11 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:38 PM UTC
Fixed (14.10.3)
7 months ago
February 23, 2026 at 08:39 PM UTC
Last Modified
3 days ago
September 24, 2026 at 08:15 PM UTC