CyberRota Analysis
AI-GeneratedImageMagick versions prior to 6.9.13-52 and 7.1.2-27 are vulnerable to an integer overflow when processing excessively large JNX files on 32-bit platforms, which can result in a heap buffer overwrite. This vulnerability could potentially allow an attacker to execute arbitrary code or crash the application, posing a risk to systems utilizing affected versions. Organizations using ImageMagick for image processing should prioritize upgrading to the patched versions to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to both 6.9.13-52 and 7.1.2-27, processing an extremely large JNX file on 32-bit platforms can cause an integer overflow, leading to a heap buffer over-write. This issue has been fixed in versions 6.9.13-52 and 7.1.2-27.
Related CVEs
Other vulnerabilities affecting the same vendor(s)