CVE-2021-39212

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.12-22 ImageMagick versions prior to 7.1.0-7

Description The issue is related to the handling of Postscript files in ImageMagick, where these files could be read and written even when excluded by a module policy in policy.xml. This could potentially allow an attacker to access confidential data and compromise its integrity. Fortunately, few users utilize the module policy, and instead, use the coder policy.

Recommendations For versions prior to 6.9.12-22, update to version 6.9.12-22 or later. For versions prior to 7.1.0-7, update to version 7.1.0-7 or later. As a temporary workaround, consider using the coder policy: .