ImageMagick
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*
- < 7.1.2-15
- < 6.9.13-40
A use-after-free vulnerability has been identified in ImageMagick's MSL interpreter, prior to versions 7.1.2-15 and 6.9.13-40. The issue arises when the interpreter processes an invalid '<map>' element, leading to a crash by using an image after it has been freed.
Exploitation of this vulnerability causes a crash of the ImageMagick application, leading to a denial-of-service condition.
Users can upgrade to ImageMagick versions 7.1.2-15 or 6.9.13-40 to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.