ImageMagick < 6.9.13-34 / 7.x < 7.1.2-9 のメモリ解放後使用 (use afterfree) / 二重解放 (GHSA-q3hc-j9x5-mp9m)

Language:

バージョン 1.3 Feb 26, 2026, 8:51 AM CVSS metrics ("CVSSv2 score" set to 5.2) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:S/C:N/I:P/A:C") CVSS metrics ("CVSSv3 score" set to 6.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 severity (based on CVE-2025-65955, severity increased from "Low" to "Medium") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202602260851
バージョン 1.2 Jan 21, 2026, 5:00 PM IAVM reference Plugin Feed: 202601211700
バージョン 1.1 Dec 5, 2025, 1:34 PM New Plugin Feed: 202512051334

* Changelogs are generally available for changes made after Nov 1, 2022