CyberRota Analysis
AI-GeneratedImageMagick versions prior to 7.1.2-30 on Windows are vulnerable to a time-of-check-time-of-use issue that enables attackers to circumvent read and write restrictions through symlink race conditions. This vulnerability allows unauthorized access to files that should be protected by policy enforcement. Organizations using ImageMagick on Windows should prioritize patching this vulnerability to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or write policy-denied files.
Related CVEs
Other vulnerabilities affecting the same vendor(s)