ImageMagick Heap Buffer Over-Read Vulnerability in Bilateral Blur Operation

A heap buffer over-read vulnerability has been identified in ImageMagick versions prior to 7.1.2-16. The issue arises in the BilateralBlurImage function, where an incorrect conversion leads to an out-of-bounds read when processing crafted images with the '-bilateral-blur' operation. This vulnerability requires user interaction to exploit.

Impact

Exploitation of this vulnerability causes a heap buffer over-read, which can lead to memory corruption or disclosure of sensitive information.

Reproduction

The vulnerability can be reproduced by processing a crafted image with the '-bilateral-blur' operation in an affected version of ImageMagick. This will trigger the heap buffer over-read due to the incorrect conversion in the BilateralBlurImage function.

Remediation

Users can upgrade to ImageMagick version 7.1.2-16 or later to address this vulnerability.