PT-2024-29583 · Unknown · Imagemagick

Lebr0Nli · Published 2024-07-29 · Updated 2025-11-20 · CVE-2024-41817

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.11-36

Description The issue arises when the AppImage version of ImageMagick sets the MAGICK CONFIGURE PATH and LD LIBRARY PATH environment variables to an empty path during execution. This could potentially lead to arbitrary code execution by loading malicious configuration files or shared libraries in the current working directory.

Recommendations For versions prior to 7.11-36, update to version 7.11-36 or later to resolve the issue. As a temporary workaround, consider restricting the execution of ImageMagick in untrusted directories to minimize the risk of exploitation.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-41817

GHSA-8RXC-922V-PHG8

Affected Products

Imagemagick

References · 13

• 🔥 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8rxc-922v-phg8 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41817.json · Exploit
• https://github.com/ImageMagick/ImageMagick/commit/6526a2b28510ead6a3e14de711bb991ad9abff38 · Patch
• https://ubuntu.com/security/CVE-2024-41817 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41817 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-41817 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-41817 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41817 · Vendor Advisory
• https://github.com/ImageMagick/ImageMagick/blob/3b22378a23d59d7517c43b65b1822f023df357a0/app-image/AppRun#L11-L14 · Note
• https://t.me/cveNotify/143488 · Telegram Post
• https://t.me/cveNotify/143457 · Telegram Post
• https://t.me/cvenotify/97802 · Telegram Post
• https://twitter.com/sakibulalikhan/status/1900124992286978364 · Twitter Post