ImageMagick Heap Use-After-Free Vulnerability in MSL Decoder

A heap-use-after-free vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. This vulnerability is triggered by a crafted MSL script, which causes the operation element handler to replace and free an image while the parser continues to read from it. This leads to a use-after-free condition in the ReadBlobString function during subsequent parsing.

Impact

Exploitation of this vulnerability creates a heap-use-after-free condition, which can potentially be exploited to execute arbitrary code or cause a denial-of-service.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.