A memory allocation vulnerability in ImageMagick allows unauthenticated remote attackers to trigger a denial of service through excessive resource consumption.

This flaw involves improper resource management where a crafted SVG file triggers an attempt to allocate approximately 674 GB of memory. This is an unauthenticated vulnerability that leads to an out of memory abort of the application.

The exploitation of this vulnerability results in a denial of service, rendering the affected application or service unavailable to legitimate users. Given the CVSS score of 7.5, this high severity risk can lead to significant operational disruption, particularly in environments that rely on ImageMagick for automated image processing or file uploads.

Immediate Action: Update ImageMagick to version 7.1.2-15 or 6.9.13-40, or apply the relevant security patches provided by your package distributor or NuGet repository.

Proactive Monitoring: Monitor system logs and resource usage for sudden spikes in memory consumption or unexpected process terminations related to image processing tasks.

Compensating Controls: Implement strict file size limits and input validation for all uploaded images to prevent the processing of malicious SVG files at the application layer.

Public Exploit Available: Unknown

Organizations utilizing ImageMagick should prioritize the deployment of the vendor provided updates to mitigate the risk of denial of service attacks. Because this vulnerability can be triggered by unauthenticated users, it represents a significant risk to the availability of external facing services and should be addressed within the standard patch management cycle.