CVE-2023-5349

Summary

CVE-2023-5349 is a memory leak vulnerability affecting ruby-magick, a popular Ruby library used for interfacing with ImageMagick. This issue arises due to an improper memory management, which results in a gradual consumption of system resources. By deliberately exploiting this flaw, an attacker can trigger memory exhaustion and cause a denial of service (DoS) condition. Systems running ruby-magick are advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.