ImageMagick NULL Pointer Dereference Vulnerability in Pixel Cache Cloning

A NULL pointer dereference vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. This vulnerability allows remote attackers to cause a denial-of-service by crashing applications linked with ImageMagick, through the use of a specially crafted image file. The issue arises in the ClonePixelCacheRepository function, where improper handling of image data can lead to a crash.

Impact

Exploitation of this vulnerability causes a crash of the application using ImageMagick, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by using AddressSanitizer to compile ImageMagick. When a crafted image file is processed, the NULL pointer dereference occurs in the ClonePixelCacheRepository function, causing the application to crash.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40, where this vulnerability has been patched.