CVE-2012-1610: Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows...

Security readout for executives and security teams

CVE-2012-1610 is a denial-of-service flaw in older ImageMagick releases. A crafted JPEG with unusual EXIF metadata can trigger an integer overflow and out-of-bounds read during image property parsing, potentially crashing services that process uploaded or remote images. Exposure is most likely in web upload handlers, media pipelines, thumbnailers, document converters, or automation that uses ImageMagick versions before 6.7.6-4 to process untrusted JPEG files. Prioritize remediation where ImageMagick processes untrusted uploads or remote images. The known impact is availability, not confirmed code execution, so urgency depends on whether image processing is internet-facing or business-critical. Mitigation focus: Upgrade ImageMagick to 6.7.6-4 or a vendor-fixed package.; Apply relevant Debian, Ubuntu, openSUSE, or distribution security updates.; Avoid processing untrusted JPEGs with vulnerable ImageMagick versions..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.