K000132457 : ImageMagick vulnerability CVE-2022-44268

Security Advisory Description

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it). (CVE-2022-44268)

Impact

BIG-IP (AAM, Edge Gateway, and WebAccelerator)

This issue affects BIG-IP systems only when WAM or AAM is provisioned. If exploited, this vulnerability may result in an information leak.

BIG-IP (LTM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM), BIG-IQ Centralized Management, SPK, NGINX, and Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.