Medium, CVSS 5.3NuGetPublished
ImageMagick has memory leak in msl encoder
CVE-2026-25638 · GHSA-gxcx-qjqp-8vjw
- Affected
- NuGet magick.net-q8-x86.net-q8-x64 < 14.10.3
- Fixed in
- 14.10.3· Vendor fix available
- Issue
- Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources.
Recommended action: Upgrade to 14.10.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.