CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-15 are susceptible to a heap-buffer-overflow read vulnerability in the GetPixelIndex function, which arises from improper handling of image channel metadata during pixel cache memory allocation. This flaw can lead to memory and disk allocation failures, potentially exposing sensitive data to attackers. Organizations utilizing ImageMagick for image processing should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting any writer calling GetPixelIndex.
Related CVEs
Other vulnerabilities affecting the same vendor(s)