{"id":"ALPINE-CVE-2021-39212","details":"ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded by a `module` policy in `policy.xml`. ex. \u003cpolicy domain=\"module\" rights=\"none\" pattern=\"PS\" /\u003e. The issue has been resolved in ImageMagick 7.1.0-7 and in 6.9.12-22. Fortunately, in the wild, few users utilize the `module` policy and instead use the `coder` policy that is also our workaround recommendation: \u003cpolicy domain=\"coder\" rights=\"none\" pattern=\"{PS,EPI,EPS,EPSF,EPSI}\" /\u003e.","modified":"2026-11-03T06:32:58.630733497Z","published":"2021-09-13T18:15:23.907Z","upstream":["CVE-2021-39212"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2021-39212"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.15","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.16","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.17","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.18","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.19","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.20","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick","ecosystem":"Alpine:v3.24","purl":"pkg:apk/alpine/imagemagick?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.12-0"},{"fixed":"7.1.0.10-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick6","ecosystem":"Alpine:v3.15","purl":"pkg:apk/alpine/imagemagick6?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.12.31-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}},{"package":{"name":"imagemagick6","ecosystem":"Alpine:v3.16","purl":"pkg:apk/alpine/imagemagick6?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.12.31-r0"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-39212.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N"}]}