GHSA-vpxv-r9pg-7gpr ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

• NuGet Magick.NET-Q16-AnyCPU: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-HDRI-AnyCPU: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-HDRI-OpenMP-arm64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-HDRI-OpenMP-x64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-HDRI-arm64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-HDRI-x64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-OpenMP-arm64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-OpenMP-x64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-OpenMP-x86: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-arm64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-x64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q16-x86: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q8-AnyCPU: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q8-OpenMP-arm64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q8-OpenMP-x64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q8-arm64: < 14.10.3 → fixed in 14.10.3 • NuGet Magick.NET-Q8-x86: < 14.10.3 → fixed in 14.10.3

The UIL and XPM image encoder do not validate the pixel index value returned by `GetPixelIndex()` before using it as an array subscript. In HDRI builds, `Quantum` is a floating-point type, so pixel index values can be negative. An attacker can craft an image with negative pixel index values to trigger a global buffer overflow read during conversion, leading to information disclosure or a process crash. ``` READ of size 1 at 0x55a8823a776e thread T0 #0 0x55a880d01e85 in WriteUILImage coders/uil.c:355 ``` ``` READ of size 1 at 0x55fa1c04c66e thread T0 #0 0x55fa1a9ee415 in WriteXPMImage coders/xpm.c:1135 ```