Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified) ImageMagick-c++ (affected versions not specified) ImageMagick-c++-devel (affected versions not specified) ImageMagick-devel (affected versions not specified) ImageMagick-djvu (affected versions not specified) ImageMagick-doc (affected versions not specified) ImageMagick-heic (affected versions not specified) ImageMagick-libs (affected versions not specified) ImageMagick-perl (affected versions not specified) ImageMagick7 (affected versions not specified) ImageMagick7-c++ (affected versions not specified) ImageMagick7-c++-devel (affected versions not specified) ImageMagick7-devel (affected versions not specified) ImageMagick7-djvu (affected versions not specified) ImageMagick7-doc (affected versions not specified) ImageMagick7-heic (affected versions not specified) ImageMagick7-libs (affected versions not specified) ImageMagick7-perl (affected versions not specified)

Description The PasskeyEncipherImage() function is susceptible to information disclosure. This occurs due to the reuse of a nonce (a number used once) during AES-CTR encryption, which can allow an attacker to decrypt data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.