ImageMagick permits a local privileged workflow to overwrite an arbitrary file with random data because the delegate symlink cleanup routine does not verify the MAGICK_SHRED_PASSES environment variable before performing the cleanup. This flaw allows file corruption, potentially causing denial of service or data loss. The weakness is a path traversal and overwrite vulnerability, identified by CWE-61 and CWE-59.

The vulnerability exists in ImageMagick 7.x releases before 7.1.2‑32 and in ImageMagick 6.x releases before 6.9.13‑57. These versions are part of the open‑source image manipulation library used on many platforms.

The CVSS score of 4 indicates moderate severity. EPSS is not available and the flaw is not listed in the CISA KEV catalog. Exploitation requires a local privileged workflow, so the attack vector is local. An attacker with sufficient privileges can overwrite a chosen file, potentially disrupting services or corrupting critical data. Overall, the risk is moderate but confined to systems where a privileged user can invoke ImageMagick's delegate cleanup functionality.