Lifecycle Timeline
1DescriptionCVE.org
Alpine Linux: imagemagick fixed in 7.1.2.12-r0
AnalysisAI
ImageMagick on Alpine Linux received a security fix in package version 7.1.2.12-r0, addressing an unspecified vulnerability. The nature of the underlying flaw, affected attack surface, and potential attacker impact are not disclosed in available data - only the Alpine Linux vendor advisory confirms a fix was issued. EPSS score of 0.13% (32nd percentile) indicates low current exploitation probability, and no active exploitation or public exploit code has been identified at time of analysis.
Technical ContextAI
ImageMagick is a widely-deployed open-source image processing suite used for format conversion, transformation, and rendering across Linux distributions. Alpine Linux packages it as 'imagemagick' and issues security updates through its apk package management system. The upstream ImageMagick project (https://imagemagick.org) typically addresses vulnerabilities in categories such as memory corruption, input validation failures, or format parsing flaws (e.g., heap overflows, use-after-free, or out-of-bounds reads in codec handlers). No CWE classification has been provided for this CVE, and no CVSS vector is available, meaning the root cause class, attack vector, and privilege requirements cannot be determined from the available data. The CPE for the affected package would be cpe:/a:imagemagick:imagemagick on Alpine Linux, but no version range beyond the fix version (7.1.2.12-r0) has been specified.
Affected ProductsAI
The affected product is ImageMagick as packaged by Alpine Linux. The fix was released in Alpine Linux package version 7.1.2.12-r0. No specific version range of upstream ImageMagick is confirmed from available data. No CPE strings with version ranges are provided. The sole source is the Alpine Linux vendor report; no upstream ImageMagick advisory or NVD entry with CPE data was available at time of analysis.
RemediationAI
Update the Alpine Linux imagemagick package to version 7.1.2.12-r0 or later using the Alpine package manager: 'apk upgrade imagemagick'. This is the vendor-released patch per Alpine Linux. No upstream ImageMagick advisory URL was available in the provided data, so administrators should also consult https://imagemagick.org/script/security-policy.php and the Alpine Linux security tracker for additional context. If immediate patching is not possible and the deployment processes untrusted user-supplied images, consider restricting the formats ImageMagick is permitted to process via a security policy XML (policy.xml), disabling high-risk coders such as MVG, MSL, or PS, or sandboxing ImageMagick processes. Note that restricting coders may break legitimate functionality depending on the application's image format requirements.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today