ImageMagick before version 7.1.2-32 has a policy bypass vulnerability in the -script operation caused by missing checks on file descriptor handling. This flaw allows an attacker to close file descriptors that were not opened by the current operation, thereby circumventing any security policies configured for the image processing engine. The weakness is a form of improper resource management (CWE-404) and user-controlled key authorization bypass (CWE-283). While the vulnerability does not directly cause denial of service, it undermines the integrity of the policy enforcement system and can enable the execution of malicious scripts or other privileged actions that would normally be prohibited.

ImageMagick products running a release before 7.1.2-32 are affected. The vulnerability applies to all builds of ImageMagick shipped prior to the 7.1.2‑32 patch level across all platforms.

The CVSS score of 4.8 indicates a moderate risk. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is likely local: an adversary who can invoke the -script operation (for example, by submitting a crafted image or script to an untrusted image processing service) can bypass configured policies. Because the flaw permits closing of arbitrary file descriptors, it may be leveraged to elevate privileges or execute additional privileged commands if the underlying system trusts the ImageMagick process. Additionally, the flaw represents an authorization bypass (CWE-283), which could allow attackers to override policy restrictions.