High severity7.0NVD Advisory· Published Jul 29, 2024· Updated Jun 17, 2026
CVE-2024-41817
CVE-2024-41817
Description
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICK_CONFIGURE_PATH and LD_LIBRARY_PATH environment variables while executing, which might lead to arbitrary code execution by loading malicious configuration files or shared libraries in the current working directory while executing ImageMagick. The vulnerability is fixed in 7.11-36.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7before 7.11-36+ 1 more
- (no CPE)range: before 7.11-36
- (no CPE)range: < 7.11-36
- osv-coords5 versionspkg:apk/chainguard/imagemagick-6pkg:apk/chainguard/imagemagick-6-devpkg:apk/chainguard/imagemagick-6-docpkg:apk/chainguard/imagemagick-6-staticpkg:deb/ubuntu/imagemagick
< 0+ 4 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: >= 0
Patches
Vulnerability mechanics
References
3- github.com/ImageMagick/ImageMagick/commit/6526a2b28510ead6a3e14de711bb991ad9abff38nvdPatch
- github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8rxc-922v-phg8nvdExploitVendor Advisory
- github.com/ImageMagick/ImageMagick/blob/3b22378a23d59d7517c43b65b1822f023df357a0/app-image/AppRunnvdIssue Tracking
News mentions
0No linked articles in our index yet.