CVE-2022-44268

2023-02-0621:15:09

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.014 Low

EPSS

Percentile

86.4%

JSON

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

CPENameOperatorVersion
imagemagickeq7.0.10-5
imagemagickeq7.0.10-32
imagemagickeq7.0.5-6
imagemagickeq7.0.10-51
imagemagickeq7.0.7-21
imagemagickeq7.0.6-7
imagemagickeq7.0.7-38
imagemagickeq7.0.10-10
imagemagickeq7.0.10-25
imagemagickeq7.0.9-12

Name	Operator	Version
imagemagick	eq	7.0.10-5
imagemagick	eq	7.0.10-32
imagemagick	eq	7.0.5-6
imagemagick	eq	7.0.10-51
imagemagick	eq	7.0.7-21
imagemagick	eq	7.0.6-7
imagemagick	eq	7.0.7-38
imagemagick	eq	7.0.10-10
imagemagick	eq	7.0.10-25
imagemagick	eq	7.0.9-12