ImageMagick Heap Buffer Overflow Vulnerability in XWD Encoder Allowing Out-of-Bounds Write

A heap buffer overflow vulnerability has been identified in ImageMagick versions prior to 7.1.2-16 and 6.9.13-41. This issue arises from a 32-bit unsigned integer overflow in the XWD (X Windows) encoder, leading to an undersized heap buffer allocation. When processing extremely large images, this vulnerability can be exploited to perform an out-of-bounds write on the heap.

Impact

Exploitation of this vulnerability leads to a heap buffer overflow, which can commonly be exploited to execute arbitrary code.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-16 or 6.9.13-41 to address this vulnerability.