GHSA-qh5g-q395-cx4j: ImageMagick: Heap-use-after-free via XMP profile could result in a crash

July 24, 2026

Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j
github.com/advisories/GHSA-qh5g-q395-cx4j
github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Code Behaviors & Features

Detect and mitigate GHSA-qh5g-q395-cx4j with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →