ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

ImageMagick is a widely used image processing suite [1]. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow exists in the MSL attribute processing in msl.c. A long value written into a fixed-size stack buffer causes memory corruption [2][4].

The vulnerability can be triggered by processing a crafted image file containing a malicious MSL attribute. No authentication is required if an attacker can supply an image to an application using ImageMagick, making the attack surface broad [2].

Successful exploitation allows an attacker to corrupt memory, potentially leading to arbitrary code execution or denial of service [4]. The issue has been patched in versions 7.1.2-15 and 6.9.13-40; users are advised to update immediately.