How to safely use PHP Imagick?

Question

PHP

Imagick supports a huge number of formats, some of them allow a lot, so much that you can do exploits, for example in SVG. Is there built-in protection against all kinds of exploits specifically in the php module and what are the practices for safe work with Imagick?

Answer 1

Only timely software updates + good system administrator.

Answer 2

1. Read and build the code from the repository yourself and follow its development (bugtrack and file updates).
2. Check all input data ("body" of images) against the expected format.
3. Run an image processing script in a secure and fully isolated PHP environment.