CVE-2022-1270: Buffer Overflow
In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.40-4+deb12u1Fixed in 1.4+really1.3.45+hg17696-1Fixed in 1.4+really1.3.49-1 - Upgrade
Upgrade
alpine/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.3.38-r0 - Upgrade
Upgrade
debian/graphicsmagickto a version that resolves this vulnerability.Fixed in 1.4+really1.3.38-1
Event History
Frequently Asked Questions
What is CVE-2022-1270?
CVE-2022-1270 is a heap buffer overflow vulnerability found in GraphicsMagick when parsing MIFF files.
How does CVE-2022-1270 impact GraphicsMagick?
CVE-2022-1270 can lead to a heap buffer overflow in GraphicsMagick, potentially allowing an attacker to execute arbitrary code or cause a denial-of-service.
Which versions of GraphicsMagick are affected by CVE-2022-1270?
GraphicsMagick version 1.4.020220326 is affected by CVE-2022-1270.
How can I fix CVE-2022-1270 in GraphicsMagick?
To fix CVE-2022-1270 in GraphicsMagick, update to version 1.4+ or apply the necessary security patches provided by your distribution or vendor.
Where can I find more information about CVE-2022-1270?
You can find more information about CVE-2022-1270 in the references provided: [link1](https://lists.debian.org/debian-lts-announce/2022/11/msg00028.html), [link2](https://security.gentoo.org/glsa/202209-19), [link3](https://sourceforge.net/p/graphicsmagick/bugs/664/).