ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage

The vulnerability is an out-of-bounds heap write within the WaveletDenoiseImage method [1]. Improper bounds checking when processing a crafted image with the -wavelet-denoise operation allows an attacker to write beyond allocated memory [4].

Exploitation requires the attacker to supply a malicious image file to an application using ImageMagick's wavelet denoising functionality [2]. If ImageMagick is used in a web service (e.g., image upload), no prior authentication is necessary. The attack can be triggered remotely if the application processes user-provided images.

Successful exploitation can corrupt heap memory, potentially allowing arbitrary code execution or causing a denial of service [2][4]. The exact impact depends on the heap layout and mitigation techniques, but the out-of-bounds write provides a vector for memory corruption.

The vulnerability is fixed in ImageMagick versions 7.1.2-16 and 6.9.13-41 [1][4]. Users are strongly advised to update to these versions or apply the official patch. No workarounds are available; upgrading is the only mitigation.