{"schema":"threatline.record/2","record":{"id":"GHSA-8xmr-6q99-c4x8","aliases":["GHSA-8xmr-6q99-c4x8"],"summary":"Undefined Behavior in the INFO, JSON and YAML encoders when writing it in a compressed format","details":"When writing an image using the INFO, JSON and YAML encoders in a compressed format an internal method expects a pointer of a different type that will result in a SIGABRT or SIGSEGV.","categories":["Libraries & packages"],"product":"ImageMagick","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8","source_modified_at":"2026-09-27T15:02:00Z","fetched_at":"2026-10-26T12:48:13.248886Z","package":{"ecosystem":"c/c++","name":"ImageMagick"},"range":"< 7.1.2-32"},{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8","source_modified_at":"2026-09-27T15:02:00Z","fetched_at":"2026-10-26T12:48:13.248886Z","package":{"ecosystem":"c/c++","name":"ImageMagick"},"range":"< 6.9.13-57"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8","source_modified_at":"2026-09-27T15:02:00Z","fetched_at":"2026-10-26T12:48:13.248886Z","package":{"ecosystem":"c/c++","name":"ImageMagick"},"version":"7.1.2-32"},{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8","source_modified_at":"2026-09-27T15:02:00Z","fetched_at":"2026-10-26T12:48:13.248886Z","package":{"ecosystem":"c/c++","name":"ImageMagick"},"version":"6.9.13-57"}],"cvss":2.2,"severity":"Low","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-09-27T15:02:00Z","modified_at":"2026-09-27T15:02:00Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8","fetched_at":"2026-10-26T12:48:13.248886Z","source_modified_at":"2026-09-27T15:02:00Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-27T15:02:00Z","content_hash":"6c700b81ee3370dc3eefd6fe07082842e6d86b3e7cd97bb8c2384cc1563693ff"}}