CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-32 are susceptible to a policy bypass vulnerability in the -script operation, allowing attackers to manipulate file descriptors not associated with the current operation. This could enable them to circumvent established security policies, potentially leading to unauthorized access or data exposure. Organizations utilizing ImageMagick for image processing should prioritize patching this vulnerability to mitigate the associated risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.