Skip to content
OpenAdvisories
High · 7.0 Public exploit CVE-2024-41817 EUVD-2024-39202

Arbitrary Code Execution in `AppImage` version `ImageMagick`

Published Jul 29, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Vendor: ImageMagick Product: ImageMagick

Description

ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty path when setting `MAGICK_CONFIGURE_PATH` and `LD_LIBRARY_PATH` environment variables while executing, which might lead to arbitrary code execution by loading malicious configuration files or shared libraries in the current working directory while executing `ImageMagick`. The vulnerability is fixed in 7.11-36.

Affected products

VendorProductAffectedFixed
ImageMagick ImageMagick < 7.11-36 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

  • Dxsk/CVE-2024-41817-poc ★ 4 · Mar 19, 2025

    CVE-2024-41817 POC ImageMagick <= 7.1.1-35 Arbitrary Code Execution

  • maikneysm/AutoPwn-Titanic.htb ★ 0 · Jun 21, 2025

    This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and exploits an ImageMagick vulnerability (CVE-2024-4…

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 5

References