CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a use-after-free issue in the PDF writer, specifically when handling CMYK images compressed with JPEG2000. This flaw allows attackers to exploit the memory management error, potentially leading to application crashes. Organizations utilizing ImageMagick for PDF generation, particularly those processing CMYK images, should prioritize updating to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.