UpHeron
All vulnerabilities

Servers and applications

CVE-2022-1115

A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.

Severity
Medium 5.5
Published
29 Aug 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.9.12-44, 7.1.0-29
Sources
NVD

Affected software

SoftwareAffected versions
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick
  • Every version before 6.9.12-44
  • From 7.0.0-0 before 7.1.0-29

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-1115
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-1115