CVE-2022-48541

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Aug 22, 2023
Updated: Mar 20, 2024
CWE ID 401

Summary

CVE-2022-48541 is a memory leak vulnerability affecting ImageMagick versions 7.0.10-45 and 6.9.11-22. An attacker can exploit this issue by sending a crafted "identify -help" command, resulting in excessive memory consumption and a denial of service (DoS) condition. The vulnerability arises due to insufficient input validation in the ImageMagick software, potentially leading to resource exhaustion and service interruption.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • ImageMagick
  • Fedora Operating System

Affected Vendors

  • Fedora Project
  • Imagemagick Studio