Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility

guest · Feb 1, 2023

By Ravie Lakshmanan - February 1, 2023

Cybersecurity researchers have disclosed details of two security flaws in the open source ImageMagick software that could potentially lead to a denial-of-service (DoS) and information disclosure.
Click to expand...

The two issues, which were identified by Latin American cybersecurity firm Metabase Q in version 7.1.0-49, were addressed in ImageMagick version 7.1.0-52, released in November 2022.

A brief description of the flaws is as follows -

CVE-2022-44267 - A DoS vulnerability that arises when parsing a PNG image with a filename that's a single dash ("-")

CVE-2022-44268 - An information disclosure vulnerability that could be exploited to read arbitrary files from a server when parsing an image

Click to expand...

This is not the first time security vulnerabilities have been discovered in ImageMagick. In May 2016, multiple flaws were disclosed in the software, one of which, dubbed ImageTragick, could have been abused to gain remote code execution when processing user-submitted images.
Click to expand...

Log in or Sign up

Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility

guest Guest

Log in or Sign up

Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility

guest Guest

Useful Searches