ImageMagick Heap Buffer Overflow Vulnerability in Despeckle Operation on 32-Bit Builds

A heap buffer overflow vulnerability has been identified in ImageMagick versions prior to 7.1.2-19 and 6.9.13-44. The issue arises from an integer overflow in the despeckle operation, leading to an out-of-bounds write on 32-bit builds. This vulnerability has been addressed in the latest releases of ImageMagick.

Impact

Exploitation of this vulnerability causes a heap buffer overflow, resulting in an out-of-bounds write, which can potentially be exploited to execute arbitrary code or cause a crash.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-19 or 6.9.13-44 to address this vulnerability.