CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak in the PNG encoder, which fails to release allocated memory upon libpng initialization failure. This flaw can be exploited by attackers to repeatedly trigger PNG encoding operations, potentially leading to memory exhaustion and denial of service. Organizations using affected versions of ImageMagick should prioritize patching to mitigate this low-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.