ImageMagick Memory Leak Vulnerability in YUV Decoder

A memory leak vulnerability has been identified in ImageMagick versions prior to 7.1.2-26 and in the 6.9.x series prior to 6.9.13-51. The issue arises in the YUV decoder when the software fails to open a blob, leading to a memory leak. This vulnerability can be exploited repeatedly, causing resource exhaustion and a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a memory leak, causing resource exhaustion and denial-of-service conditions.

Remediation

Users can upgrade to ImageMagick versions 7.1.2-26 or 6.9.13-51 to address this vulnerability.