ImageMagick Memory Leak Vulnerability in ReadSTEGANOImage Coder

A memory leak vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. The issue occurs in the ReadSTEGANOImage function within the steganography coder, where the watermark Image object is not properly released on three early-return paths. This oversight leads to a significant memory leak of approximately 13.5KB or more per invocation, which can be exploited to cause a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a memory leak of over 13KB per invocation, causing a denial-of-service condition.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.