In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
20ADD76D-50E8-4DCE-8572-28070BFE3835
6.9.10-42
6.0
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
5F512348-96B1-4F5F-94A2-3112BD1FEA9A
7.0.8-42
7.0.0-0
OR
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
F1E78106-58E6-4D59-990F-75DA575BFAD9
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
B620311B-34A3-48A6-82DF-6F078D7A4493
OR
In magick/blob.c line 702, the function UnmapBlob freed the object 'blob_info->data', but it did't set the point null.  The code returned this dangling point in line 716, it will cause UAF in this code.
Use after free in magick/blob.c
This is a GitHub Issue
repo:ImageMagick6
owner:ImageMagick
Title : Use after free in magick/blob.c
Issue date:

--- start body ---
In magick/blob.c line 702, the function UnmapBlob freed the object 'blob_info->data', but it did't set the point null.  The code returned this dangling point in line 716, it will cause UAF in this code.
--- end body ---

comments :
--- start comments ---

--- end comments ---