ImageMagick Heap Overflow Vulnerability in PCD Decoder Leading to Out-of-Bounds Read

A heap overflow vulnerability has been identified in ImageMagick versions prior to 7.1.2-15 and 6.9.13-40. The issue arises in the PCD (Photo CD) decoder, which fails to perform adequate boundary checking when handling Huffman-coded data. This lack of proper validation allows for an out-of-bounds read, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability causes a heap-buffer-overflow, allowing for out-of-bounds memory access which could be exploited to read or manipulate memory in an unintended way.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.