A stack-based buffer overflow vulnerability in ImageMagick allows for potential system impact through the processing of malicious image files.

This vulnerability is a stack-based buffer overflow (CWE-121) occurring within the morphology kernel parsing functions. An attacker can trigger this flaw by providing user-controlled kernel strings that exceed the fixed-size stack buffers, leading to memory corruption.

Successful exploitation of this vulnerability can result in high integrity and availability impact, as indicated by the CVSS score of 7.1. By causing stack corruption, an attacker may cause application crashes or potentially influence program execution, leading to significant service disruption and potential loss of data integrity in environments that process untrusted image files.

Immediate Action: Update ImageMagick to version 7.1.2-16 or 6.9.13-41 immediately. If you are using the Magick.NET NuGet packages, update to version 14.10.4.

Proactive Monitoring: Monitor application logs for segmentation faults or abnormal process terminations associated with image processing services.

Compensating Controls: Implement strict input validation or sandboxing for any services that accept and process user-uploaded image files to limit the reach of potential exploits.

Public Exploit Available: No (exploit_available unknown)

Given the potential for stack corruption, organizations should prioritize patching their ImageMagick installations or dependent libraries. Applying the identified vendor updates is the only definitive way to remediate the underlying memory safety issue and prevent potential exploitation.