The vulnerability in ImageMagick prior to version 7.1.2-15 involves improper handling of memory in the PDB decoder component. Specifically, when memory allocation fails, the code uses a stale pointer, resulting in a use-after-free condition. This can be triggered by processing specially crafted PDB files, causing crashes or a single zero byte write to freed memory. No known exploits are reported in the wild. The CVSS 4.0 vector indicates network attack vector with high attack complexity and low impact on confidentiality, integrity, and availability.

Successful exploitation may cause application crashes or minor memory corruption by writing a zero byte to freed memory. There is no indication of privilege escalation, data disclosure, or persistent code execution from the available data.

A fix is available in ImageMagick version 7.1.2-15. Users should upgrade to this version or later to remediate the vulnerability. Patch status is not explicitly confirmed in the input data, but the description states the issue exists before 7.1.2-15, implying the fix is included in 7.1.2-15. Verify with the vendor advisory for the latest remediation guidance.