CVE-2022-44267

ImageMagick 7.1.0-49 is vulnerable to Denial of Service

Medium · published February 6, 2023

Patch now

High probability of exploitation

CVSS calls it medium at 6.5. It sits in the 99.5th percentile for exploit probability.

CVSS v3.1
6.5
EPSS
77%
Percentile
99.5
In the wild
Unconfirmed
What it is

ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.76581 · 99.5th percentile
Published
2023-02-06T00:00Z
EPSS history
Timeline
  • 06 FEB 00:00Z
    ImageMagick 7.1.0-49 is vulnerable to Denial of Service
    cvelistv5