CVE-2022-32547: Incorrect Type Cast
In ImageMagick version < 7.1.0-30, there are runtime errors:
load of misaligned address 0x62300000714d for type 'double', which requires 8 byte alignment load of misaligned address 0x62300000710b for type 'float', which requires 4 byte alignment
References: https://github.com/ImageMagick/ImageMagick/issues/5033 https://github.com/ImageMagick/ImageMagick/pull/5034
Other sources
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-32547?
CVE-2022-32547 is a vulnerability in ImageMagick that allows for a load of misaligned address for type 'double', causing a negative impact on the application.
How does CVE-2022-32547 affect ImageMagick?
CVE-2022-32547 affects ImageMagick by causing a negative impact on the application when processing crafted or untrusted input.
What is the severity of CVE-2022-32547?
CVE-2022-32547 has a severity rating of 7.8, which is considered high.
How can I fix CVE-2022-32547 in ImageMagick?
To fix CVE-2022-32547 in ImageMagick, you should update to the recommended version provided by the software vendor.
Where can I find more information about CVE-2022-32547?
You can find more information about CVE-2022-32547 at the following references: [Reference 1](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32547), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi?id=2091813), [Reference 3](https://github.com/ImageMagick/ImageMagick/issues/5033)