What is GHSA-5r4x-w6p5-222q?

GHSA-5r4x-w6p5-222q is a security advisory published by GitHub Security Advisories with Medium severity. ImageMagick: Use-After-Free in MSL decoder.

Which CVE IDs does GHSA-5r4x-w6p5-222q cover?

GHSA-5r4x-w6p5-222q covers the following CVE IDs: CVE-2026-46523. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5r4x-w6p5-222q?

GHSA-5r4x-w6p5-222q has a CVSS v3 base score of 6.2, published by GitHub Security Advisories.

Which products are affected by GHSA-5r4x-w6p5-222q?

GHSA-5r4x-w6p5-222q affects 18 products, including: nuget/Magick.NET-Q16-AnyCPU:\u003c 14.13.1; nuget/Magick.NET-Q16-HDRI-AnyCPU:\u003c 14.13.1; nuget/Magick.NET-Q16-HDRI-OpenMP-arm64:\u003c 14.13.1; nuget/Magick.NET-Q16-HDRI-OpenMP-x64:\u003c 14.13.1; nuget/Magick.NET-Q16-HDRI-arm64:\u003c 14.13.1; and others — see the full list on the advisory page.

GHSA-5r4x-w6p5-222qMediumCVSS 6.2

ImageMagick: Use-After-Free in MSL decoder.

Vendor

GitHub Security Advisories

Published

May 18, 2026

Last Modified

May 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-46523 →

📋 Description

A crafted MSL image can trigger a heap-use-after-free.

🎯 Affected products18

nuget/Magick.NET-Q16-AnyCPU:< 14.13.1
nuget/Magick.NET-Q16-HDRI-AnyCPU:< 14.13.1
nuget/Magick.NET-Q16-HDRI-OpenMP-arm64:< 14.13.1
nuget/Magick.NET-Q16-HDRI-OpenMP-x64:< 14.13.1
nuget/Magick.NET-Q16-HDRI-arm64:< 14.13.1
nuget/Magick.NET-Q16-HDRI-x64:< 14.13.1
nuget/Magick.NET-Q16-HDRI-x86:< 14.13.1
nuget/Magick.NET-Q16-OpenMP-arm64:< 14.13.1
nuget/Magick.NET-Q16-OpenMP-x64:< 14.13.1
nuget/Magick.NET-Q16-arm64:< 14.13.1
nuget/Magick.NET-Q16-x64:< 14.13.1
nuget/Magick.NET-Q16-x86:< 14.13.1
nuget/Magick.NET-Q8-AnyCPU:< 14.13.1
nuget/Magick.NET-Q8-OpenMP-arm64:< 14.13.1
nuget/Magick.NET-Q8-OpenMP-x64:< 14.13.1
nuget/Magick.NET-Q8-arm64:< 14.13.1
nuget/Magick.NET-Q8-x64:< 14.13.1
nuget/Magick.NET-Q8-x86:< 14.13.1

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products18

🔗 References (2)