CVE-2017-9098

CVE-2017-9098 is a high-severity vulnerability affecting ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24, stemming from uninitialized memory use in the RLE decoder. This flaw allows an unauthenticated remote attacker to leak sensitive information from process memory, particularly in long-running server processes converting images for multiple users. With a CVSS score of 7.5, the vulnerability has a high impact on confidentiality, is easily exploitable over the network with low attack complexity, and requires no user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.