vulnerability

Amazon Linux AMI 2: CVE-2021-3574: Security patch for ImageMagick (Multiple Advisories)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:N/I:N/A:P)

Published

Aug 26, 2022

Added

Mar 7, 2023

Modified

May 20, 2026

Description

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks.

Solutions

amazon-linux-ami-2-upgrade-imagemagickamazon-linux-ami-2-upgrade-imagemagick-camazon-linux-ami-2-upgrade-imagemagick-c-develamazon-linux-ami-2-upgrade-imagemagick-debuginfoamazon-linux-ami-2-upgrade-imagemagick-develamazon-linux-ami-2-upgrade-imagemagick-docamazon-linux-ami-2-upgrade-imagemagick-perl

References

AMAZON-AL2/ALAS-2023-1971
CVE-2021-3574
https://attackerkb.com/topics/CVE-2021-3574
CWE-401
EUVD-EUVD-2021-26883
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26883

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report