CVE-2022-44268EPSS p99.8%
CVE-2022-44268CVE-2022-44268
imagemagick / imagemagick
Description
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).
Scoring
| CVSS | 6.5 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
| EPSS | 89.85% probability of exploitation · percentile 99.8% · 2026-06-18T12:00:27Z |
| Last modified | 2026-06-17 |