CyberRota Analysis
AI-GeneratedVersions of ImageMagick prior to 7.1.2-32 and 6.9.13-57 are vulnerable to uninitialized heap memory disclosure through the GIF decoder's application extension handler. This flaw allows attackers to create malicious GIF files that can expose sensitive information stored in heap memory as image metadata. Organizations using affected versions of ImageMagick should prioritize patching to mitigate the risk of sensitive data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image metadata, disclosing sensitive heap information.