{"id":"GHSA-rg39-4fm5-hrp2","kind":"vulnerability","aliases":["GHSA-rg39-4fm5-hrp2"],"related":[],"title":"Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds","description":"### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-273h-m46v-96q4. This link is maintained to preserve external references.\n\n### Original Description\nImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.","summary":"This advisory is a withdrawn duplicate of GHSA-273h-m46v-96q4, which covers the same ImageMagick PSB decoding flaw. A crafted PSB file processed on a 32-bit build can read heap memory out of bounds, leaking data or crashing the process.","severity":"medium","cvss":3.7,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Magick.NET-Q8-x86","fixed":["14.10.3"],"affected":"< 14.10.3","ecosystem":"nuget"}],"ecosystems":["nuget"],"tags":["32-bit","cwe-125","dotnet","imagemagick","magick.net","package"],"not_affected_if":["64-bit-build","no-psb-processing","withdrawn-duplicate"],"how_to_check":"- Check the installed Magick.NET-Q8-x86 package version in the project file; unknown whether it is below `14.10.3`.\n- Look for ImageMagick builds that process untrusted PSD/PSB files on 32-bit systems.","fix":"- Magick.NET-Q8-x86 move to `14.10.3` (per the product range in this advisory).\n- ImageMagick: the original description names `7.1.2-15` and `6.9.13-40` as fixed versions.","status":"withdrawn","published_at":"2026-06-21T15:31:24+00:00","first_seen_at":"2026-11-03T17:41:47+00:00","triaged_at":"2026-11-03T17:42:47+00:00","updated_at":"2026-11-03T17:42:47+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-03T17:42:47Z","model":"claude-haiku-5-5","output":{"fix":"- Magick.NET-Q8-x86 move to `14.10.3` (per the product range in this advisory).\n- ImageMagick: the original description names `7.1.2-15` and `6.9.13-40` as fixed versions.","reach":"unknown","title":"Magick.NET: crafted PSB file causes heap out-of-bounds read on 32-bit","impact":"low","summary":"This advisory is a withdrawn duplicate of GHSA-273h-m46v-96q4, which covers the same ImageMagick PSB decoding flaw. A crafted PSB file processed on a 32-bit build can read heap memory out of bounds, leaking data or crashing the process.","audience":"developers","category":"package","nicknames":[],"who_cares":["imagemagick","magick.net","dotnet","32-bit"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Heap memory is read out of bounds, leaking data or crashing the process.","analyst_note":"Advisory is withdrawn as a duplicate; confirm the canonical entry GHSA-273h-m46v-96q4 and its fixed-version ranges.","how_to_check":"- Check the installed Magick.NET-Q8-x86 package version in the project file; unknown whether it is below `14.10.3`.\n- Look for ImageMagick builds that process untrusted PSD/PSB files on 32-bit systems.","plain_action":"","needs_analyst":true,"not_affected_if":["64-bit-build","no-psb-processing","withdrawn-duplicate"],"who_is_affected":"Applications that use the 32-bit Magick.NET-Q8-x86 build (or a 32-bit ImageMagick build) to decode PSB files from untrusted sources. Systems on 64-bit builds or those that never handle PSD/PSB uploads are less exposed. The advisory itself is withdrawn in favour of GHSA-273h-m46v-96q4, so refer to that entry for the authoritative details.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"low"},"cost_usd":0.000791,"input_tokens":4311,"output_tokens":720,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-125':40B '-15':119C '-40':125C '273h':54B,103C '32':20A,37B,72B,151C '4fm5':26A,31A '6.9':121C '6.9.13':124C '7.1.2':118C '96q4':56B,105C 'advisori':2A,46B,89C,91C 'bit':21A,38B,73B,152C 'bound':17A,81B,148C 'build':22A,74B,153C 'caus':13A,142C 'coders/psd.c':140C 'contain':126C 'cover':58B 'craft':66B,156C 'crash':85B,166C 'cwe':39B 'data':83B 'decod':11A,63B,136C 'descript':115C 'disclosur':163C 'dotnet':41B 'duplic':1A,50B,88C,99C 'extern':112C 'file':68B,158C 'flaw':64B 'ghsa':24A,29A,53B,102C 'ghsa-273h-m46v-96q4':52B,101C 'ghsa-rg39-4fm5-hrp2':23A,28A 'heap':14A,77B,144C 'hrp2':27A,32A 'imagemagick':3A,42B,61B,116C 'inform':162C 'integ':4A,128C 'lead':160C 'leak':82B 'link':107C 'm46v':55B,104C 'magick.net':33A,43B 'maintain':109C 'memori':78B 'origin':114C 'out-of-bound':145C 'overflow':5A,129C 'packag':44B 'path':12A,137C 'preserv':111C 'process':69B,87B,154C 'psb':7A,62B,67B,132C,157C 'psd':8A,133C 'q8':35A 'q8-x86':34A 'read':18A,76B,149C 'readpsdchannelrl':138C 'refer':113C 'rg39':25A,30A 'rle':10A,135C 'v2':9A,134C 'withdrawn':49B,94C 'x':122C 'x86':36A","nicknames":[],"mitigations":[],"who_affected":"Applications that use the 32-bit Magick.NET-Q8-x86 build (or a 32-bit ImageMagick build) to decode PSB files from untrusted sources. Systems on 64-bit builds or those that never handle PSD/PSB uploads are less exposed. The advisory itself is withdrawn in favour of GHSA-273h-m46v-96q4, so refer to that entry for the authoritative details.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":["magicknetq8x86"],"ptokens":["magick","net","q8","x86"],"labels":["32bit","cwe125","dotnet","imagemagick","magicknet","medium","nuget","package"],"campaign_type":null,"first_public_at":"2026-06-21T15:31:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-rg39-4fm5-hrp2","url":"https://github.com/advisories/GHSA-rg39-4fm5-hrp2","severity":"medium","published_at":"2026-06-21T15:31:24+00:00","modified_at":"2026-11-03T17:37:30+00:00","first_seen_at":"2026-11-03T17:41:47+00:00","fetched_at":"2026-11-03T17:41:47+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}