ImageMagick Denial-of-Service Vulnerability in JPEG Encoder

A denial-of-service vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. The issue arises from a 'continue' statement in the JPEG extent binary search loop of the JPEG encoder, which can lead to an infinite loop when writing persistently fails. This flaw allows an attacker to create a crafted image that causes 100% CPU consumption and hangs the process.

Impact

Exploitation of this vulnerability leads to a process hang and 100% CPU consumption, causing a denial-of-service condition.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.