Root-Brainoverflow

HTTP servers do not enforce a limit on the number of array elements and object keys validated in a single request. An attacker can send a request within the default 4 MiB size limit containing a validation workload large enough to cause JavaScript heap exhaustion, leading to process termination. This issue primarily affects tools that accept arrays or records and does not impact stdio-only servers. No credentials are required for exploitation unless the application implements authentication before SDK processing.

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-0 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 experience infinite lines during a specific XMP file conversion command when writing. Recommendations: Update to version 7.1.2-0 or later.