GHSA-qh5g-q395-cx4j: ImageMagick: Heap-use-after-free via XMP profile could result in a crash

July 24, 2026

Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh5g-q395-cx4j
github.com/advisories/GHSA-qh5g-q395-cx4j
github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Code Behaviors & Features

Detect and mitigate GHSA-qh5g-q395-cx4j with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →