CVE-2022-48541
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial...
7.1 HighFix available
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
1.47%Up 1.4 points since Aug 23, 2023
What each source reports
NVD Score used
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
CVE-2022-48541- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
CVE List No score
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
CVE-2022-48541- Updated
- 2026-11-02
EUVDEUVD-2022-51237 No score
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
EUVD-2022-51237- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g5fw-9pgg-xvqg
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial...
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
GHSA-g5fw-9pgg-xvqg- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-48541
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
UBUNTU-CVE-2022-48541- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVCLSA-2023-1696351712 No score
Fix CVE(s): CVE-2022-48541
- SECURITY UPDATE: a memory leak that allows remote attackers to perform
a denial of service via the "identify -help" command
- debian/patches/CVE-2022-48541.patch: added missing calls to destroy methods
- CVE-2022-48541
- Record
CLSA-2023-1696351712- Updated
- 2026-11-02
Show 4 moreShow less
OSVCLSA-2023-1696351966 No score
Fix CVE(s): CVE-2022-48541
- SECURITY UPDATE: a memory leak that allows remote attackers to perform
a denial of service via the "identify -help" command
- debian/patches/CVE-2022-48541.patch: added missing calls to destroy methods
- CVE-2022-48541
- Record
CLSA-2023-1696351966- Updated
- 2026-11-02
OSV No score
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
CVE-2022-48541- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-48541 No score
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Record
DEBIAN-CVE-2022-48541- Updated
- 2026-11-03
OSVUSN-6393-1 No score
imagemagick vulnerability
It was discovered that ImageMagick did not properly handle memory when processing the -help option. An attacker could potentially use this issue to cause a crash.
- Record
USN-6393-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
imagemagick-6.q16TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
imagemagick-commonTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
imagemagick-docTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libimage-magick-perlTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libimage-magick-q16-perlTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagick++-6-headersTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagick++-6.q16-5v5TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagick++-6.q16-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagick++-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
Show 51 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libmagickcore-6-arch-configTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickcore-6-headersTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickcore-6.q16-2TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickcore-6.q16-2-extraTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickcore-6.q16-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickcore-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickwand-6-headersTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickwand-6.q16-2TuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickwand-6.q16-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
libmagickwand-devTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
perlmagickTuxCare:Ubuntu:16.04 |
before 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 | 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 |
imagemagickTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagick-6-commonTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagick-6-docTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagick-6.q16TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagick-6.q16hdriTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagick-commonTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagick-docTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libimage-magick-perlTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libimage-magick-q16-perlTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libimage-magick-q16hdri-perlTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagick++-6-headersTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagick++-6.q16-7TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagick++-6.q16-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagick++-6.q16hdri-7TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagick++-6.q16hdri-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagick++-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6-arch-configTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6-headersTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6.q16-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6.q16-3-extraTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6.q16-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6.q16hdri-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6.q16hdri-3-extraTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-6.q16hdri-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickcore-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickwand-6-headersTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickwand-6.q16-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickwand-6.q16-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickwand-6.q16hdri-3TuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickwand-6.q16hdri-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
libmagickwand-devTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
perlmagickTuxCare:Ubuntu:18.04 |
before 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 | 8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els3 |
imagemagickDebian:12 |
before 8:6.9.11.57+dfsg-1 | 8:6.9.11.57+dfsg-1 |
imagemagickDebian:13 |
before 8:6.9.11.57+dfsg-1 | 8:6.9.11.57+dfsg-1 |
imagemagickDebian:14 |
before 8:6.9.11.57+dfsg-1 | 8:6.9.11.57+dfsg-1 |
imagemagickDebian:10 |
before 8:6.9.10.23+dfsg-2.1+deb10u7, plus listed versions 8:6.9.10.23+dfsg-2.18:6.9.10.23+dfsg-2.1+deb10u18:6.9.10.23+dfsg-2.1+deb10u28:6.9.10.23+dfsg-2.1+deb10u38:6.9.10.23+dfsg-2.1+deb10u48:6.9.10.23+dfsg-2.1+deb10u58:6.9.10.23+dfsg-2.1+deb10u6 |
8:6.9.10.23+dfsg-2.1+deb10u7 |
imagemagickUbuntu:Pro:14.04:LTS |
before 8:6.7.7.10-6ubuntu3.13+esm6, plus listed versions 8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3 Show 17 moreShow less8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm5 |
8:6.7.7.10-6ubuntu3.13+esm6 |
imagemagickUbuntu:Pro:16.04:LTS |
before 8:6.8.9.9-7ubuntu5.16+esm9, plus listed versions 8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1 Show 27 moreShow less8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm8 |
8:6.8.9.9-7ubuntu5.16+esm9 |
imagemagickUbuntu:Pro:18.04:LTS |
before 8:6.9.7.4+dfsg-16ubuntu6.15+esm2, plus listed versions 8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6 Show 12 moreShow less8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm1 |
8:6.9.7.4+dfsg-16ubuntu6.15+esm2 |
imagemagickUbuntu:Pro:20.04:LTS |
before 8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11 Show 10 moreShow less8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.9 |
8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-48541 is a high vulnerability (CVSS 7.1) in Imagemagick, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in imagemagick 8:6.8.9.9-7ubuntu5.17+tuxcare.els9.
References
github.com/ImageMagick/ImageMagick/issues/2889
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LICYTADFJAFPZW3Y2MKNCJIUYODPAG4L
lists.debian.org/debian-lts-announce/2024/03/msg00020.html
Show 9 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-48541
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1696351712
security-tracker.debian.org/tracker/CVE-2022-48541
ubuntu.com/security/CVE-2022-48541
cve.org/CVERecord?id=CVE-2022-48541