cvedb.io
CVE-2022-44268
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2023-02-06T21:15:09.473 · Last modified 2026-06-17T05:08:02.787

Summary

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

Affected products

imagemagick — imagemagick

Does this affect you?

Add your gear to cvedb and we'll alert you only when imagemagick ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.