ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/44xxx/CVE-2022-44268.json"
}{
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "7.1.0-49"
}
],
"cpe": "cpe:2.3:a:imagemagick:imagemagick:7.1.0-49:*:*:*:*:*:*:*",
"source": "CPE_FIELD"
}