CVE catalog

CVE-2023-34153

imagemagick: CVE-2023-34153

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.14% · Oct 25, 2026

A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianimagemagicksid8:7.1.2.34+dfsg1-1not affected
Debianimagemagickforky8:7.1.2.31+dfsg1-1not affected
Debianimagemagicktrixie8:7.1.1.43+dfsg1-1+deb13u12not affected
Debianimagemagicktrixie-security8:7.1.1.43+dfsg1-1+deb13u11not affected
Debianimagemagickbookworm8:6.9.11.60+dfsg-1.6+deb12u11not affected
Debianimagemagickbookworm-security8:6.9.11.60+dfsg-1.6+deb12u14not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianimagemagicksourcesidNot affectedunimportantNot reportedNot reported
DebianimagemagicksourceforkyNot affectedunimportantNot reportedNot reported
DebianimagemagicksourcetrixieNot affectedunimportantNot reportedNot reported
DebianimagemagicksourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [SUSE security advisories and VEX]