ImageMagick ASHLAR Image Writer Memory Leak Vulnerability

A memory leak vulnerability has been identified in the ASHLAR image writer of ImageMagick, prior to version 7.1.2-15. This vulnerability allows an attacker to exhaust process memory by sending a crafted image that creates small, allocated objects that are never released. The issue has been patched in version 7.1.2-15.

Impact

Exploitation of this vulnerability leads to a memory leak, where allocated memory is not properly freed, causing increased memory usage and potential exhaustion of available resources.

Remediation

Users can upgrade to ImageMagick version 7.1.2-15 or later to address this vulnerability.