CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-26 are susceptible to a heap use-after-free vulnerability due to a lack of null checks when parsing XMP profiles. This flaw allows attackers to create malicious image files that can lead to application crashes, potentially disrupting services. Organizations using affected versions of ImageMagick should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.
Related CVEs
Other vulnerabilities affecting the same vendor(s)