Cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

ImageMagick versions through 7.1.2-33 and 6.9.13-58 are vulnerable to arbitrary code execution via binary planting due to an insecure search path for gswin64c.exe.

Multiple vulnerabilities in ImageMagick, including CVE-2022-44267 and CVE-2022-44268, allow attackers to trigger denial-of-service, bypass security restrictions, or perform unauthorized disclosure of sensitive information via malformed image files.

A high-severity vulnerability (CVE-2026-54672) in the `app-builder-lib` component of Electron Builder allows an attacker to achieve arbitrary code execution by placing a malicious shared library in the current working directory when a vulnerable AppImage is executed, due to an uncontrolled search path element in the `LD_LIBRARY_PATH` environment variable.