CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak in the YUV encoder, which does not release allocated memory upon failure of a specific operation. This vulnerability can be exploited by attackers using specially crafted input to trigger the memory leak, potentially leading to resource exhaustion and denial of service. Organizations using affected versions of ImageMagick should prioritize updating to mitigate this low-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.