CVE-2023-34153: Fedoraproject Extra Packages For Enterprise Linux

High severity, CVSS 7.8. EPSS: 3.1% chance of exploitation in the next 30 days.

A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 8.0 only
• Fedoraproject Fedora: version 37 only; version 38 only
• ImageMagick ImageMagick: from 7.1.0-1, before 7.1.1-11 (fixed in 7.1.1-11)
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only

Published 2023-05-30. Last modified 2026-06-17.