ImageMagick
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*
- < 7.1.2-15
- < 6.9.13-40
A memory leak vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. The issue resides in the 'WriteMSLImage' function within 'coders/msl.c', where allocated resources are not properly released before the function exits. This oversight leads to a significant loss of memory, with Valgrind reporting over 177,000 bytes lost.
Exploitation of this vulnerability causes a memory leak, where allocated memory is not released, potentially leading to increased memory usage and degradation of application performance over time.
Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.