A critical integer overflow vulnerability in ImageMagick allows unauthenticated attackers to trigger out of bounds memory reads via maliciously crafted TIM image files.

The vulnerability exists in the ReadTIMImage function (coders/tim.c) due to an integer overflow during image size calculation. An unauthenticated attacker can supply a specially crafted TIM file to trigger an out of bounds read, potentially leaking sensitive memory content.

The CVSS score of 7.5 indicates a high severity threat, primarily due to the potential for unauthenticated remote exploitation. Successful exploitation may lead to the disclosure of sensitive information residing in memory, which could compromise system integrity or facilitate further attacks against the infrastructure.

Immediate Action: Update ImageMagick to version 7.1.2-10 or later, and ensure that dependent software packages, such as the specified Magick.NET versions, are updated to 14.10.0.

Proactive Monitoring: Monitor application logs for anomalous processing errors or frequent crashes related to image conversion modules, which may indicate attempted exploitation.

Compensating Controls: Implement input validation or restrict access to image processing endpoints to trusted users, and utilize memory-safe sanitization proxies if immediate patching is not feasible.

Public Exploit Available: Unknown.

The risk posed by this vulnerability is significant, particularly for web applications that process user supplied image files. Administrators must prioritize updating to the patched version across all environments to prevent potential memory disclosure attacks. If immediate patching is not possible, organizations should restrict exposure of the ImageMagick interface to prevent unauthorized access.