Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: imagemagick fixed in 7.1.2.8-r0
AnalysisAI
ImageMagick on Alpine Linux was patched in package version 7.1.2.8-r0, addressing an unspecified vulnerability. The nature, class, and impact of the underlying flaw are not disclosed in available intelligence - no CVSS vector, CWE, or vendor description beyond the fix notice has been published. With an EPSS score of 0.08% (23rd percentile), exploitation probability is currently low, and no public exploit or active exploitation has been identified at time of analysis.
Technical ContextAI
ImageMagick is a widely-deployed open-source image processing suite used for format conversion, manipulation, and rendering across Linux distributions including Alpine Linux. It has a long history of security vulnerabilities spanning memory corruption, server-side request forgery, and arbitrary code execution due to its broad attack surface across dozens of image format parsers. The Alpine Linux package version 7.1.2.8-r0 corresponds to upstream ImageMagick 7.1.2-8. No CWE classification is available in the provided data, so the root cause class - whether memory safety, input validation, path traversal, or other - cannot be confirmed. No CPE strings were provided, limiting precise product scoping.
Affected ProductsAI
ImageMagick as packaged by Alpine Linux is affected, with the fix delivered in Alpine package version 7.1.2.8-r0, corresponding to upstream ImageMagick 7.1.2-8. Versions prior to 7.1.2.8-r0 in Alpine Linux are presumed affected based on the fix notice. The specific Alpine Linux branch or branches carrying the vulnerable package are not specified in available data. No CPE strings were provided, and the scope of impact on non-Alpine distributions of ImageMagick is unknown from this data set.
RemediationAI
Update the ImageMagick Alpine Linux package to version 7.1.2.8-r0 or later using 'apk upgrade imagemagick'. This is the vendor-released patch per the Alpine Linux package advisory. If immediate patching is not possible and ImageMagick is exposed to untrusted input - such as user-uploaded images processed server-side - consider restricting or sandboxing image processing operations (e.g., using a dedicated low-privilege container or disabling web-facing upload endpoints) as a compensating control. Note that disabling image processing may impact application functionality. No upstream ImageMagick advisory URL was available in the provided data to confirm whether other distributions require separate patches.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today