ImageMagick Heap Buffer Overflow Vulnerability in JXL Encoder Allowing Memory Corruption

A heap buffer overflow vulnerability has been identified in the ImageMagick JXL encoder, in versions prior to 7.1.2-19. The issue arises when an image is encoded as 16-bit floats, leading to a heap write overflow. This vulnerability can cause memory corruption, with potential exploitation scenarios including arbitrary code execution or application crashes.

Impact

Exploitation of this vulnerability leads to a heap buffer overflow, causing a write of a single zero byte when encoding JXL images as 16-bit floats. This type of memory corruption can often be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the application.

Remediation

Users can upgrade to ImageMagick version 7.1.2-19 or later to address this vulnerability.