ImageMagick Memory Leak Vulnerability in WriteASHLARImage Function

Vulnerability

A memory leak vulnerability has been identified in ImageMagick versions prior to 7.1.2-15, specifically within the WriteASHLARImage function in coders/ashlar.c. The vulnerability arises because the function allocates a structure but fails to properly release the memory when an exception occurs, leading to a potential memory leak.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not released properly, potentially leading to increased memory usage and degradation of application performance over time.

Remediation

Users can upgrade to ImageMagick version 7.1.2-15 or later to address this vulnerability.

Added: Feb 24, 2026, 2:28 AM
Updated: Feb 24, 2026, 2:28 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
2.5
exploitability
4.7
remediation
7.7
relevance
3.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.