CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-32 are vulnerable to a use-after-free flaw in the -fx option, which can be exploited when memory allocation fails during processing. This vulnerability may lead to application crashes or memory corruption if an attacker supplies specially crafted -fx expressions under memory pressure. Users of affected ImageMagick versions, particularly those handling untrusted input, should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.