Heap Buffer Overflow in ImageMagick via Floyd-Steinberg Dithering

Executive Summary

This vulnerability exists in ImageMagick, a free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when an image with a mask uses the Floyd-Steinberg dithering method, it causes a negative heap buffer overwrite. This means that the software writes data outside the allocated memory bounds in a way that can corrupt memory.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to a negative heap buffer overwrite, which may cause the application to crash or behave unpredictably. According to the CVSS score (5.5), the impact is primarily on availability (A:H), meaning it can cause denial of service or application instability. The attack requires local access with low privileges and user interaction.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update ImageMagick to version 7.1.2-24 or later, where the issue has been patched.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability affects ImageMagick versions prior to 7.1.2-24 when processing images with masks using the Floyd-Steinberg dithering method. To detect if your system is vulnerable, you should first check the installed version of ImageMagick.

• Run the command `magick -version` or `convert -version` to determine the installed ImageMagick version.

If the version is older than 7.1.2-24, your system is potentially vulnerable. Since the vulnerability requires processing specially crafted images with masks and Floyd-Steinberg dithering, monitoring for such image processing activities or testing with a crafted image could help detect exploitation attempts.

No specific detection commands or network signatures are provided in the available resources.

Useful 0 Not Useful 0