ImageMagick Infinite Loop Vulnerability in PCD File Processing Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. The issue arises in the PCD file decoder, where the DecodeImage() function can enter an infinite loop if the file lacks a valid Sync marker. This loop causes the application to become unresponsive, excessively consume CPU resources, and ultimately exhaust system resources.

Impact

Exploitation of this vulnerability leads to an infinite loop condition, causing the application to become unresponsive and consume excessive CPU resources. This behavior can exhaust system resources, potentially leading to a denial-of-service condition.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.