ImageMagick Heap-Based Buffer Overflow Vulnerability in UHDR Encoder Allowing Out-of-Bounds Write

A heap-based buffer overflow vulnerability has been identified in ImageMagick versions prior to 7.1.2-16. This issue arises in the UHDR encoder, where truncation of a value can lead to an out-of-bounds write, potentially allowing for arbitrary memory manipulation.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to memory corruption and possibly allow for arbitrary code execution.

Remediation

Users can upgrade to ImageMagick version 7.1.2-16 or later to address this vulnerability.