Listen to this Post
How the CVE Works
The vulnerability occurs in the `GetXmpNumeratorAndDenominator()` function within ImageMagick’s XMP profile processing. When converting an XMP file, the function enters an infinite loop due to an unchecked floating-point comparison (while(fabs(df - value) > MagickEpsilon)). The loop fails to converge for certain inputs (e.g., extreme values like 720000000000000), causing the application to hang indefinitely. The issue stems from improper bounds handling in the denominator/numerator calculation, leading to a denial-of-service (DoS) condition during image processing.
DailyCVE Form
Platform: ImageMagick
Version: <7.1.0-51
Vulnerability: Infinite Loop
Severity: High
Date: 2022-11-30
Prediction: Patched by 2022-12-15
What Undercode Say
Analytics:
magick convert exploit.xmp output.png Triggers hang gdb --args magick hang.a.mng Debug crash
Exploit:
Malicious XMP files crafted with extreme values trigger the loop.
Protection from this CVE:
Update to ImageMagick >=7.1.0-51.
Impact:
Denial-of-Service (DoS) via CPU exhaustion.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
