Denial-of-Service (DoS) Through Memory Exhaustion

ImageMagick is vulnerable to denial of service (DoS) attacks through memory exhaustion. The load_level function in coders/xcf.c does not validate offsets, allowing a malicious user to pass a xcf file to allocate over the memory limit and consume all the application’s memory.