ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

Vulnerability

Overview

ImageMagick, a widely used open-source image processing suite, contains a heap buffer over-read vulnerability in its -wavelet-denoise operator. The flaw occurs when processing images with small dimensions, causing the software to read memory beyond the allocated buffer boundary. This issue affects versions prior to 7.1.2-15 and 6.9.13-40 [1][4].

Exploitation

Details

An attacker can trigger the vulnerability by supplying a crafted image file with small dimensions to an application or service that uses ImageMagick's -wavelet-denoise operator. No authentication is required if the service processes user-uploaded images. The attack complexity is low, as the operator is commonly invoked via command-line or API calls [4].

Impact

Successful exploitation results in a heap buffer over-read, which may lead to information disclosure (reading sensitive data from memory) or cause a denial of service (crash). The confidentiality impact is rated high, while integrity and availability impacts are low [4].

Mitigation

The vulnerability has been patched in ImageMagick versions 7.1.2-15 and 6.9.13-40. Users should update to these or later versions. The fix is also included in downstream projects such as Magick.NET 14.10.3 [3]. No workarounds are documented; upgrading is the recommended action.