ImageMagick is vulnerable to denial of service (DoS) attacks through memory exhaustion. The load_level
function in coders/xcf.c
does not validate offsets, allowing a malicious user to pass a xcf
file to allocate over the memory limit and consume all the application’s memory.