ImageMagick Denial-of-Service Vulnerability in SVG Conversion

A denial-of-service vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. The issue arises because the software fails to properly validate multi-layer nested MVG (Magick Vector Graphics) conversions to SVG (Scalable Vector Graphics). This oversight can lead to a denial-of-service condition, where the application may become unresponsive or fail to process images as expected.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the application to become unresponsive or fail to process images correctly.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40, both of which include the necessary patch to address this vulnerability.