UpHeron
All vulnerabilities

Servers and applications

CVE-2022-44268

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).

Severity
Medium 6.5
Published
6 Feb 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick
  • Version 7.1.0-49

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-44268
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-44268