CVE-2022-48541

Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.11-22 through 7.0.10-45

Description A memory leak in the identify -help command allows remote attackers to perform a denial of service. The issue is related to incorrect memory deallocation before removing the last reference, which can be exploited by a remote attacker to disrupt data integrity and cause a denial of service.

Recommendations For ImageMagick versions 6.9.11-22 through 7.0.10-45, consider disabling the identify -help command as a temporary workaround to minimize the risk of exploitation. Restrict access to the identify command to prevent remote attackers from performing a denial of service.