CVE-2023-34152
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution...
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20, CWE-78
- Updated
- 2026-11-02
CVE List
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-38252
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
EUVD-2023-38252- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-47q6-hqqr-mcr3 No score
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution...
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
GHSA-47q6-hqqr-mcr3- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-34152
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
DEBIAN-CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVJLSEC-2026-906
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
JLSEC-2026-906- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2023-34152
CVE-2023-34152 in imagemagick - Patched by Root
Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2023-34152
CVE-2023-34152 in imagemagick - Patched by Root
Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-04
OSVROOT-OS-DEBIAN-13-CVE-2023-34152
CVE-2023-34152 in imagemagick - Patched by Root
Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-05
OSVUBUNTU-CVE-2023-34152
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
- Record
UBUNTU-CVE-2023-34152- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
imagemagickDebian:12 |
All versions, plus listed versions 8:6.9.11.60+dfsg-1.68:6.9.11.60+dfsg-1.6+deb12u18:6.9.11.60+dfsg-1.6+deb12u108:6.9.11.60+dfsg-1.6+deb12u118:6.9.11.60+dfsg-1.6+deb12u12 Show 45 moreShow less8:6.9.11.60+dfsg-1.6+deb12u138:6.9.11.60+dfsg-1.6+deb12u148:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u38:6.9.11.60+dfsg-1.6+deb12u48:6.9.11.60+dfsg-1.6+deb12u58:6.9.11.60+dfsg-1.6+deb12u68:6.9.11.60+dfsg-1.6+deb12u78:6.9.11.60+dfsg-1.6+deb12u88:6.9.11.60+dfsg-1.6+deb12u98:6.9.12.20+dfsg1-18:6.9.12.20+dfsg1-1.18:6.9.12.20+dfsg1-1.28:6.9.12.98+dfsg1-18:6.9.12.98+dfsg1-28:6.9.12.98+dfsg1-38:6.9.12.98+dfsg1-48:6.9.12.98+dfsg1-58:6.9.12.98+dfsg1-5.18:6.9.12.98+dfsg1-5.1~exp18:6.9.12.98+dfsg1-5.28:6.9.13.12+dfsg1-18:7.1.1.33+dfsg1-18:7.1.1.33+dfsg1-28:7.1.1.39+dfsg1-18:7.1.1.39+dfsg1-28:7.1.1.39+dfsg1-38:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.24+dfsg1-18:7.1.2.25+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.26+dfsg1-1 |
None known |
imagemagickDebian:13 |
All versions, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1+deb13u18:7.1.1.43+dfsg1-1+deb13u108:7.1.1.43+dfsg1-1+deb13u118:7.1.1.43+dfsg1-1+deb13u12 Show 33 moreShow less8:7.1.1.43+dfsg1-1+deb13u28:7.1.1.43+dfsg1-1+deb13u38:7.1.1.43+dfsg1-1+deb13u48:7.1.1.43+dfsg1-1+deb13u58:7.1.1.43+dfsg1-1+deb13u68:7.1.1.43+dfsg1-1+deb13u78:7.1.1.43+dfsg1-1+deb13u88:7.1.1.43+dfsg1-1+deb13u98:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-18:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.24+dfsg1-18:7.1.2.25+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.26+dfsg1-18:7.1.2.27+dfsg1-18:7.1.2.29+dfsg2-18:7.1.2.3+dfsg1-18:7.1.2.31+dfsg1-18:7.1.2.33+dfsg1-18:7.1.2.34+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1 |
None known |
imagemagickDebian:14 |
All versions, plus listed versions 8:7.1.1.43+dfsg1-18:7.1.1.46+dfsg1-18:7.1.1.47+dfsg1-18:7.1.1.47+dfsg1-28:7.1.2.1+dfsg1-1 Show 21 moreShow less8:7.1.2.12+dfsg1-18:7.1.2.13+dfsg1-18:7.1.2.15+dfsg1-18:7.1.2.15+dfsg1-28:7.1.2.16+dfsg1-18:7.1.2.18+dfsg1-18:7.1.2.19+dfsg1-18:7.1.2.21+dfsg1-18:7.1.2.23+dfsg1-18:7.1.2.24+dfsg1-18:7.1.2.25+dfsg1-18:7.1.2.25+dfsg1-28:7.1.2.26+dfsg1-18:7.1.2.27+dfsg1-18:7.1.2.29+dfsg2-18:7.1.2.3+dfsg1-18:7.1.2.31+dfsg1-18:7.1.2.33+dfsg1-18:7.1.2.34+dfsg1-18:7.1.2.7+dfsg1-18:7.1.2.8+dfsg1-1 |
None known |
ImageMagick_jllJulia |
before 7.1.1+0 | 7.1.1+0 |
imagemagickRoot:Debian:11 |
before 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.34 | 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.348:6.9.11.60+dfsg-1.3+deb11u16.aikido.338:6.9.11.60+dfsg-1.3+deb11u16.aikido.35 |
rootio-imagemagickRoot:Debian:11 |
before 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.34 | 8:6.9.11.60+dfsg-1.3+deb11u16.aikido.348:6.9.11.60+dfsg-1.3+deb11u16.aikido.338:6.9.11.60+dfsg-1.3+deb11u16.aikido.35 |
imagemagickRoot:Debian:12 |
before 8:6.9.11.60+dfsg-1.6+deb12u15.aikido.60 | 8:6.9.11.60+dfsg-1.6+deb12u15.aikido.608:6.9.11.60+dfsg-1.6+deb12u15.aikido.61 |
rootio-imagemagickRoot:Debian:12 |
before 8:6.9.11.60+dfsg-1.6+deb12u15.aikido.60 | 8:6.9.11.60+dfsg-1.6+deb12u15.aikido.608:6.9.11.60+dfsg-1.6+deb12u15.aikido.61 |
imagemagickRoot:Debian:13 |
before 8:7.1.1.43+dfsg1-1+deb13u14.aikido.46 | 8:7.1.1.43+dfsg1-1+deb13u14.aikido.468:7.1.1.43+dfsg1-1+deb13u14.aikido.47 |
rootio-imagemagickRoot:Debian:13 |
before 8:7.1.1.43+dfsg1-1+deb13u14.aikido.46 | 8:7.1.1.43+dfsg1-1+deb13u14.aikido.468:7.1.1.43+dfsg1-1+deb13u14.aikido.47 |
imagemagickUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6 Show 29 moreShow less8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.98:6.9.7.4+dfsg-16ubuntu6.118:6.9.7.4+dfsg-16ubuntu6.128:6.9.7.4+dfsg-16ubuntu6.138:6.9.7.4+dfsg-16ubuntu6.148:6.9.7.4+dfsg-16ubuntu6.158:6.9.7.4+dfsg-16ubuntu6.15+esm18:6.9.7.4+dfsg-16ubuntu6.15+esm28:6.9.7.4+dfsg-16ubuntu6.15+esm38:6.9.7.4+dfsg-16ubuntu6.15+esm48:6.9.7.4+dfsg-16ubuntu6.15+esm58:6.9.7.4+dfsg-16ubuntu6.15+esm68:6.9.7.4+dfsg-16ubuntu6.15+esm78:6.9.7.4+dfsg-16ubuntu6.15+esm88:6.9.7.4+dfsg-16ubuntu6.15+esm98:6.9.7.4+dfsg-16ubuntu6.15+esm108:6.9.7.4+dfsg-16ubuntu6.15+esm118:6.9.7.4+dfsg-16ubuntu6.15+esm128:6.9.7.4+dfsg-16ubuntu6.15+esm138:6.9.7.4+dfsg-16ubuntu6.15+esm148:6.9.7.4+dfsg-16ubuntu6.15+esm158:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.7.4+dfsg-16ubuntu6.15+esm178:6.9.7.4+dfsg-16ubuntu6.15+esm18 |
None known |
imagemagickUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu11 Show 31 moreShow less8:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.28:6.9.10.23+dfsg-2.1ubuntu11.48:6.9.10.23+dfsg-2.1ubuntu11.4+esm18:6.9.10.23+dfsg-2.1ubuntu11.58:6.9.10.23+dfsg-2.1ubuntu11.68:6.9.10.23+dfsg-2.1ubuntu11.6+esm18:6.9.10.23+dfsg-2.1ubuntu11.78:6.9.10.23+dfsg-2.1ubuntu11.7+esm18:6.9.10.23+dfsg-2.1ubuntu11.98:6.9.10.23+dfsg-2.1ubuntu11.9+esm18:6.9.10.23+dfsg-2.1ubuntu11.9+esm28:6.9.10.23+dfsg-2.1ubuntu11.108:6.9.10.23+dfsg-2.1ubuntu11.10+esm18:6.9.10.23+dfsg-2.1ubuntu11.118:6.9.10.23+dfsg-2.1ubuntu11.11+esm18:6.9.10.23+dfsg-2.1ubuntu11.11+esm28:6.9.10.23+dfsg-2.1ubuntu11.11+esm38:6.9.10.23+dfsg-2.1ubuntu11.11+esm48:6.9.10.23+dfsg-2.1ubuntu11.11+esm58:6.9.10.23+dfsg-2.1ubuntu11.11+esm68:6.9.10.23+dfsg-2.1ubuntu11.11+esm78:6.9.10.23+dfsg-2.1ubuntu11.11+esm88:6.9.10.23+dfsg-2.1ubuntu11.11+esm98:6.9.10.23+dfsg-2.1ubuntu11.11+esm108:6.9.10.23+dfsg-2.1ubuntu11.11+esm118:6.9.10.23+dfsg-2.1ubuntu11.11+esm128:6.9.10.23+dfsg-2.1ubuntu11.11+esm138:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.10.23+dfsg-2.1ubuntu11.11+esm158:6.9.10.23+dfsg-2.1ubuntu11.11+esm16 |
None known |
imagemagickUbuntu:22.04:LTS |
All versions, plus listed versions 8:6.9.11.60+dfsg-1ubuntu18:6.9.11.60+dfsg-1.38:6.9.11.60+dfsg-1.3build18:6.9.11.60+dfsg-1.3build28:6.9.11.60+dfsg-1.3ubuntu0.22.04.18:6.9.11.60+dfsg-1.3ubuntu0.22.04.28:6.9.11.60+dfsg-1.3ubuntu0.22.04.38:6.9.11.60+dfsg-1.3ubuntu0.22.04.5 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | overgrowncarrot1/ImageTragick_CVE-2023-34152 | 2023-09-27 |
| PoC in GitHub | SudoIndividual/CVE-2023-34152 | 2024-05-23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, facts | OSV | |
| affected, exploits | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-34152 is a critical vulnerability (CVSS 9.8) in Imagemagick, published May 30, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.01%, the 94th percentile. Fixed in ImageMagick_jll 7.1.1+0.
References
github.com/ImageMagick/ImageMagick/issues/6339
access.redhat.com/security/cve/CVE-2023-34152
bugzilla.redhat.com/show_bug.cgi?id=2210659
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V
nvd.nist.gov/vuln/detail/CVE-2023-34152
Left out here: 8 versions. The JSON record has them.