CVE-2023-1289

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G.

Database specific

{
    "cna_assigner":  "redhat",
    "cwe_ids":  [
        "CWE-20"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1289.json"
}

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type

GIT

Repo

https://github.com/imagemagick/imagemagick

Events

Introduced

9009707d09287d168057cb6018b37b68dd586775

Fixed

c5b23cbf2119540725e6dc81f4deb25798ead6a4

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "Fixed-in ImageMagick v7.1.1-0"
                },
                {
                    "last_affected":  "Fixed-in ImageMagick v7.1.1-0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "c5b23cbf2119540725e6dc81f4deb25798ead6a4"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Fixed-in ImageMagick v7.*

Fixed-in ImageMagick v7.1.1-0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1289.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "29902448052071645667149136699136026042",
            "length":  11448
        },
        "id":  "CVE-2023-1289-68c0f34c",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/imagemagick/imagemagick/commit/c5b23cbf2119540725e6dc81f4deb25798ead6a4",
        "target":  {
            "file":  "MagickCore/draw.c",
            "function":  "DrawPrimitive"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "52909156131205580745174177646359421269",
                "210959658475179912024626350276219083510",
                "190208875981849026616327657253389286142",
                "91551732911785474619320117426817094857"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2023-1289-9970488a",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/imagemagick/imagemagick/commit/c5b23cbf2119540725e6dc81f4deb25798ead6a4",
        "target":  {
            "file":  "MagickCore/draw.c"
        }
    }
]

vanir_signatures_modified

"2026-10-21T08:37:55Z"