CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak in the wavelet-denoise operation, where allocated memory is not released if a required resource is unavailable. This can be exploited by attackers to repeatedly invoke the wavelet-denoise process, leading to service degradation through memory exhaustion. Organizations using affected versions of ImageMagick, especially those in resource-constrained environments, should prioritize applying the necessary updates to mitigate this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability.