ImageMagick Bilateral Blur Image Method Invalid Pointer Release Vulnerability

A vulnerability exists in the BilateralBlurImage method of ImageMagick versions prior to 7.1.2-13. The issue arises because the last element in a set of double buffers allocated by the method is not properly initialized. This flaw can lead to the release of an invalid pointer in the DestroyBilateralTLS function when memory allocation fails, potentially causing a crash or other unintended behavior.

Impact

Exploitation of this vulnerability results in a release of an invalid pointer, which can lead to undefined behavior such as a program crash or memory corruption.

Remediation

Users can upgrade to ImageMagick version 7.1.2-13 or later to address this vulnerability.