Threat Intelligence Database

ImageMagick versions prior to 6.9.13-58 and 7.x before 7.1.2-33 contain a vulnerability in the IsRightsAuthorizedByName security policy check. This flaw allows local attackers with the ability to create symbolic links to bypass configured policy restrictions by redirecting the symlink to a restricted path. The vulnerability is rated as low severity with limited impact on confidentiality and integrity, and no impact on availability. A patch is available to address this issue.

ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a type confusion vulnerability in the INFO, JSON, and YAML encoders. This flaw occurs when an internal method receives a pointer of an unexpected type during image writing in a compressed format. Exploitation can cause the process to crash with SIGABRT or SIGSEGV, resulting in denial of service.

ImageMagick versions from 7.1.0-21 up to but not including 7.1.2-32 contain a heap buffer over-read vulnerability in the handling of the -fx option. This flaw allows a crafted -fx expression to read beyond the allocated heap buffer, potentially disclosing limited memory contents. The vulnerability has a medium severity rating with a CVSS score of 4.4. No known exploits are reported in the wild. A fix is available in version 7.1.2-32.

ImageMagick versions from 7.1.0-20 up to but not including 7.1.2-32 contain a use after free vulnerability in the -fx option. This flaw occurs when a memory allocation fails during processing of crafted -fx expressions, potentially leading to crashes or memory corruption. The vulnerability has a low severity score and requires local access with high attack complexity and low privileges. There is no indication of known exploits in the wild or a vendor-provided patch status.

ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a race condition due to improper synchronization when accessing the security policy. This can lead to a heap buffer overwrite and cause the application to crash, resulting in a denial of service. The vulnerability requires concurrent access to the security policy by multiple threads. The CVSS score is low, reflecting limited impact as it only causes denial of service without confidentiality or integrity loss.

ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 contain a code injection vulnerability in the MVG decoder when using a PostScript renderer. This vulnerability allows attackers to supply a crafted MVG file that injects code into the PostScript rendering path, potentially causing limited integrity and availability impacts. The CVSS score is 4.8, indicating medium severity.

ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a flaw in the JNG decoder where temporary files are not properly cleaned up after processing crafted input. This can lead to repeated leakage of temporary files, consuming disk space and potentially degrading system availability.

ImageMagick versions before 7.1.2-32 have a policy bypass vulnerability in the -script operation caused by missing checks on file descriptor handling. This flaw allows attackers with limited privileges to close file descriptors not opened by the current operation, potentially circumventing security policies. The vulnerability has a medium severity rating and a CVSS score of 3.3. No explicit patch or remediation details are provided in the available data.

A memory leak vulnerability exists in ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 in the wavelet-denoise operation. This flaw causes allocated memory to not be released when a required resource cannot be acquired. An attacker can exploit this by repeatedly triggering the wavelet-denoise process under resource-constrained conditions, leading to memory exhaustion and degraded service availability.

ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 contain an information disclosure vulnerability in the JPEG decoder. This flaw allows an attacker to supply a crafted JPEG file that causes the decoder to read and disclose uninitialized memory contents. The vulnerability has a medium severity rating with a CVSS score of 5.3.