CVE-2022-3213: Buffer Overflow
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.
Other sources
ImageMagick before version 7.1.0-47 is vulnerable to heap buffer overflow, while processing a malformed TIFF file.
https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9e41fe7cb70030e8750 https://github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a95be854fe84e6c2a2
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-3213?
CVE-2022-3213 is a heap buffer overflow issue found in ImageMagick that can cause a denial of service or undefined behavior when processing a malformed TIFF file.
Which versions of ImageMagick are affected by CVE-2022-3213?
ImageMagick versions up to 6.9.12-62 and versions between 7.1.0-0 and 7.1.0-47 are affected by CVE-2022-3213.
What is the severity of CVE-2022-3213?
CVE-2022-3213 has a severity rating of medium with a CVSS score of 5.5.
How can I fix CVE-2022-3213?
To fix CVE-2022-3213, update ImageMagick to version 6.9.12-63 or higher for versions up to 6.9.12 or update to ImageMagick version 7.1.0-48 or higher for versions between 7.1.0-0 and 7.1.0-47.
Where can I find more information about CVE-2022-3213?
You can find more information about CVE-2022-3213 on the Red Hat Security Advisory page, Bugzilla, and the ImageMagick GitHub commit.