CVE-2022-44267

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.0-49

Description The issue is related to resource management errors in the ImageMagick graphic editor. Exploitation of this issue may allow a remote attacker to cause a denial of service using the profile parameter. When ImageMagick parses a PNG image, for example, for resizing, the convert process could be left waiting for stdin input.

Recommendations For ImageMagick versions 7.1.0-49, consider disabling the convert process for PNG images until a patch is available to prevent potential denial of service attacks. Restrict access to the profile parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.