CVE-2022-0284

    Dashboard / Vulnerabilities / CVE-2022-0284

    CVE-2022-0284

    Published: 29 Aug 2022Last Modified: 24 Oct 2026

    Summary:

    Details: A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.

    References: https://access.redhat.com/security/cve/CVE-2022-0284, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0284.json, https://nvd.nist.gov/vuln/detail/CVE-2022-0284, https://bugzilla.redhat.com/show_bug.cgi?id=2045943, https://github.com/ImageMagick/ImageMagick/issues/4729, https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 660e30fd68a24d677adfa0d462962298d6b9fe34
    Fixed -e50f19fd73c792ebe912df8ab83aa51a243a3da7

    Affected versions

    Fixed in ImageMagick-7.1.0-20

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High