CVE-2022-1114
CVE-2022-1114
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Apr 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service.
Affected products
n/a · ImageMagickWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →