Read the docs

Image Processing Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Image Processing Project records in CISA KEV

No Image Processing Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Image Processing · all components

Priority HIGH 82

image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02686 Published 2022-03-01 Fixed in 1.12.2 CWE-20
Priority LOW 25

A design flaw in image processing software that modifies JPEG images might not modify the original EXIF thumbnail, which could lead to an information leak of potentially sensitive visual information that had been removed…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00465 Published 2005-02-16 No fix listed CWE-212
Open these records in search →