GHSA-gxcx-qjqp-8vjwMediumCVSS 5.3

ImageMagick has memory leak in msl encoder

Published
February 24, 2026
Last Modified
February 24, 2026

🔗 CVE IDs covered (1)

CVE-2026-25638 →

📋 Description

Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources.

==78983== Memcheck, a memory error detector
==78983== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al.
==78983== Using Valgrind-3.22.0 and LibVEX; rerun with -h for copyright info
==78983== 
==78983== 177,196 (13,512 direct, 163,684 indirect) bytes in 1 blocks are definitely lost in loss record 21 of 21
==78983==    at 0x4846828: malloc (in /usr/libexec/valgrind/vgpreload_memcheck-amd64-linux.so)

🎯 Affected products19

  • nuget/Magick.NET-Q16-AnyCPU:< 14.10.3
  • nuget/Magick.NET-Q16-HDRI-AnyCPU:< 14.10.3
  • nuget/Magick.NET-Q16-HDRI-OpenMP-arm64:< 14.10.3
  • nuget/Magick.NET-Q16-HDRI-OpenMP-x64:< 14.10.3
  • nuget/Magick.NET-Q16-HDRI-arm64:< 14.10.3
  • nuget/Magick.NET-Q16-HDRI-x64:< 14.10.3
  • nuget/Magick.NET-Q16-HDRI-x86:< 14.10.3
  • nuget/Magick.NET-Q16-OpenMP-arm64:< 14.10.3
  • nuget/Magick.NET-Q16-OpenMP-x64:< 14.10.3
  • nuget/Magick.NET-Q16-OpenMP-x86:< 14.10.3
  • nuget/Magick.NET-Q16-arm64:< 14.10.3
  • nuget/Magick.NET-Q16-x64:< 14.10.3
  • nuget/Magick.NET-Q16-x86:< 14.10.3
  • nuget/Magick.NET-Q8-AnyCPU:< 14.10.3
  • nuget/Magick.NET-Q8-OpenMP-arm64:< 14.10.3
  • nuget/Magick.NET-Q8-OpenMP-x64:< 14.10.3
  • nuget/Magick.NET-Q8-arm64:< 14.10.3
  • nuget/Magick.NET-Q8-x64:< 14.10.3
  • nuget/Magick.NET-Q8-x86.NET-Q8-x64:< 14.10.3

🔗 References (5)