CVE-2023-34153

Summary

CVE-2023-34153 is a recently discovered vulnerability affecting ImageMagick. This issue allows attackers to inject malicious shell commands through the use of specific options in ImageMagick's VIDEO encoding and decoding functionality. Specifically, the vulnerability is found in the handling of the 'video:vsync' and 'video:pixel-format' options, which could lead to arbitrary code execution. Successful exploitation of this weakness could result in serious consequences, including unauthorized system access and data theft. Users are advised to update their ImageMagick installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.