CVE-2022-0284

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-0284

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0284.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-0284

Downstream

ALPINE (1)

ALPINE-CVE-2022-0284

CGA (2)

CLEANSTART (1)

CLEANSTART-2025-QX47332

JLSEC (1)

JLSEC-2026-892

MGASA (1)

MGASA-2022-0446

openSUSE (2)

SUSE (2)

Related

openSUSE (2)

SUSE (2)

Published

2022-08-29T14:03:03Z

Modified

2026-11-04T13:05:16Z

Summary

[none]

Details

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.

Database specific

{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-125"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0284.json"
}

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type

GIT

Repo

https://github.com/imagemagick/imagemagick

Events

Introduced

660e30fd68a24d677adfa0d462962298d6b9fe34

Fixed

e50f19fd73c792ebe912df8ab83aa51a243a3da7

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "Fixed in ImageMagick-7.1.0-20"
                },
                {
                    "last_affected": "Fixed in ImageMagick-7.1.0-20"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandaloneSingleVersion"
        },
        {
            "range": [
                {
                    "fixed": "e50f19fd73c792ebe912df8ab83aa51a243a3da7"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

7.*

7.1.0-20

7.1.0-21

7.1.0-22

7.1.0-23

7.1.0-24

7.1.0-25

7.1.0-26

7.1.0-27

7.1.0-28

7.1.0-29

7.1.0-30

7.1.0-31

7.1.0-32

7.1.0-33

7.1.0-34

7.1.0-35

7.1.0-36

7.1.0-37

7.1.0-38

7.1.0-39

7.1.0-40

7.1.0-41

7.1.0-42

7.1.0-43

7.1.0-44

7.1.0-45

7.1.0-46

7.1.0-47

7.1.0-48

7.1.0-49

7.1.0-50

7.1.0-51

7.1.0-52

7.1.0-53

7.1.0-54

7.1.0-55

7.1.0-56

7.1.0-57

7.1.0-58

7.1.0-59

7.1.0-60

7.1.0-61

7.1.0-62

7.1.1-0

7.1.1-1

7.1.1-10

7.1.1-11

7.1.1-12

7.1.1-13

7.1.1-14

7.1.1-15

7.1.1-16

7.1.1-17

7.1.1-18

7.1.1-19

7.1.1-2

7.1.1-20

7.1.1-21

7.1.1-22

7.1.1-23

7.1.1-24

7.1.1-25

7.1.1-26

7.1.1-27

7.1.1-28

7.1.1-29

7.1.1-3

7.1.1-30

7.1.1-31

7.1.1-32

7.1.1-33

7.1.1-34

7.1.1-35

7.1.1-36

7.1.1-37

7.1.1-38

7.1.1-39

7.1.1-4

7.1.1-40

7.1.1-41

7.1.1-43

7.1.1-44

7.1.1-45

7.1.1-46

7.1.1-47

7.1.1-5

7.1.1-6

7.1.1-7

7.1.1-8

7.1.1-9

7.1.2-0

7.1.2-1

7.1.2-10

7.1.2-11

7.1.2-12

7.1.2-13

7.1.2-14

7.1.2-15

7.1.2-16

7.1.2-17

7.1.2-18

7.1.2-19

7.1.2-2

7.1.2-20

7.1.2-21

7.1.2-22

7.1.2-23

7.1.2-24

7.1.2-25

7.1.2-26

7.1.2-27

7.1.2-28

7.1.2-29

7.1.2-3

7.1.2-30

7.1.2-31

7.1.2-32

7.1.2-33

7.1.2-34

7.1.2-35

7.1.2-5

7.1.2-6

7.1.2-7

7.1.2-8

7.1.2-9

Fixed in ImageMagick-7.*

Fixed in ImageMagick-7.1.0-20

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0284.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "252425566050560855263177976518073506626",
            "length": 7880
        },
        "id": "CVE-2022-0284-60534e20",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7",
        "target": {
            "file": "coders/xpm.c",
            "function": "WritePICONImage"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "87797395018650578211231814916421761121",
                "200106990445893197953560268294270841294",
                "95033872146013753876397730148199448005",
                "41368052442698052330347212203678365153",
                "87797395018650578211231814916421761121",
                "201884265620066507831964570507506796376",
                "107880667450026525286913478423459820960",
                "328039202767865005710053993471843480653"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-0284-6edf2fec",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/imagemagick/imagemagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7",
        "target": {
            "file": "coders/xpm.c"
        }
    }
]

vanir_signatures_modified

"2026-11-04T13:05:16Z"