CVE-2022-28463: Buffer Overflow
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/imagemagickto a version that resolves this vulnerability.Fixed in 7.0.10.31-r0 - Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.5 - Upgrade
Upgrade
debian/imagemagickto a version that resolves this vulnerability.Fixed in 8:6.9.11.60+dfsg-1.6+deb12u11Fixed in 8:6.9.11.60+dfsg-1.6+deb12u15Fixed in 8:7.1.1.43+dfsg1-1+deb13u12Fixed in 8:7.1.1.43+dfsg1-1+deb13u14Fixed in 8:7.1.2.34+dfsg1-1
Event History
Frequently Asked Questions
What is CVE-2022-28463?
CVE-2022-28463 is a vulnerability in ImageMagick 7.1.0-27 that allows for buffer overflow.
How severe is CVE-2022-28463?
CVE-2022-28463 has a severity of 7.8 (high).
What software versions are affected by CVE-2022-28463?
ImageMagick versions 7.1.0-27 are affected by CVE-2022-28463.
How can I fix CVE-2022-28463?
To fix CVE-2022-28463, update ImageMagick to version 8:6.9.11.60+dfsg-1.3ubuntu0.22.10.1 for Ubuntu or 8:6.9.10.23+dfsg-2.1+deb10u5 for Debian.
Where can I find more information about CVE-2022-28463?
You can find more information about CVE-2022-28463 on the MITRE CVE website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28463) and the ImageMagick GitHub page (https://github.com/ImageMagick/ImageMagick/issues/4988).