CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-26 and 6.9.13-51 are susceptible to a use-after-free vulnerability triggered by failed freetype initialization, allowing continued access to already freed memory. This flaw can result in a denial of service during image processing operations. Organizations using affected versions of ImageMagick should prioritize patching to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails: the method does not exit and continues to use memory that was already freed. This can be triggered during image processing and may lead to a denial of service.