CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a type confusion flaw in the INFO, JSON, and YAML encoders, which can lead to process crashes (SIGABRT or SIGSEGV) when handling compressed image writes. This vulnerability may result in denial of service, making it a concern for organizations that utilize ImageMagick for image processing. Users of affected versions should prioritize updates to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.