CVE-2021-45463: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered. This is caused by use of the system library function for execution of the ImageMagick convert fallback in magick-load. NOTE: GEGL releases before 0.4.34 are used in GIMP releases before 2.10.30; however, this does not imply that GIMP builds enable the vulnerable feature.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Gegl Gegl: before 0.4.34 (fixed in 0.4.34)
• Gimp Gimp: before 2.10.30 (fixed in 2.10.30)
• Red Hat Enterprise Linux: version 7.0 only; version 8.0 only

Published 2021-12-23. Last modified 2026-06-17.