{"schema":"threatline.record/2","record":{"id":"GHSA-mqmp-r5jh-jx7w","aliases":["GHSA-mqmp-r5jh-jx7w"],"summary":"Heap Buffer Over-Write in PICT decoder on 32-bit systems ","details":"A crafted PICT file can cause a heap buffer over-write on 32-bit systems,","categories":["Libraries & packages"],"product":"ImageMagick (32-bit builds only)","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w","source_modified_at":"2026-10-10T13:59:40Z","fetched_at":"2026-10-23T22:01:05.715934Z","package":{"ecosystem":"c/c++","name":"ImageMagick (32-bit builds only)"},"range":"< 7.1.2-33"},{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w","source_modified_at":"2026-10-10T13:59:40Z","fetched_at":"2026-10-23T22:01:05.715934Z","package":{"ecosystem":"c/c++","name":"ImageMagick (32-bit builds only)"},"range":"< 6.9.13-58"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w","source_modified_at":"2026-10-10T13:59:40Z","fetched_at":"2026-10-23T22:01:05.715934Z","package":{"ecosystem":"c/c++","name":"ImageMagick (32-bit builds only)"},"version":"7.1.2-33"},{"source":"GitHub Advisory Database","source_url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w","source_modified_at":"2026-10-10T13:59:40Z","fetched_at":"2026-10-23T22:01:05.715934Z","package":{"ecosystem":"c/c++","name":"ImageMagick (32-bit builds only)"},"version":"6.9.13-58"}],"cvss":3.7,"severity":"Low","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-10T13:59:40Z","modified_at":"2026-10-10T13:59:40Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w","fetched_at":"2026-10-23T22:01:05.715934Z","source_modified_at":"2026-10-10T13:59:40Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-10T13:59:40Z","content_hash":"b35ddaf47ae8d034052c4f0aa51063cd495a6e620e66ce4ec0b6ceec1f318a80"}}