CVE-2022-0284

2022-08-2914:03:03

CWE-125

redhat

www.cve.org

imagemagick

getpixelalpha

heap-based-buffer-over-read

pixel-accessor.h

tiff image

picon file format

denial of service

information disclosure

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

A heap-based-buffer-over-read flaw was found in ImageMagick’s GetPixelAlpha() function of ‘pixel-accessor.h’. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.

CNA Affected

[
  {
    "product": "ImageMagick",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in ImageMagick-7.1.0-20"
      }
    ]
  }
]