Denial of Service Vulnerability in ImageMagick by ImageMagick Developers

CVE-2023-1289

What is CVE-2023-1289?

A flaw in ImageMagick allows a remote attacker to exploit a crafted SVG file that generates a segmentation fault, resulting in server crashes. This vulnerability leads to denial of service by creating an excessive number of temporary files in the /tmp directory, potentially filling up disk space. The impact is substantial when larger SVG files are processed, as they can increase temporary file sizes significantly, posing a risk to system stability.

References