CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.
References
Link Resource
https://lists.debian.org/debian-lts-announce/2022/11/msg00028.html Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202209-19 Third Party Advisory
https://sourceforge.net/p/graphicsmagick/bugs/664/ Exploit Issue Tracking Third Party Advisory
https://www.debian.org/security/2022/dsa-5288 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:graphicsmagick:graphicsmagick:1.4.020220326:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

History

26 Nov 2022, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-28 20:15

Updated : 2024-02-04 22:51


NVD link : CVE-2022-1270

Mitre link : CVE-2022-1270

CVE.ORG link : CVE-2022-1270


JSON object : View

Products Affected

debian

  • debian_linux

graphicsmagick

  • graphicsmagick
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787

Out-of-bounds Write