CVE-2022-44267: Medium severity imagemagick vulnerability
ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-44267?
CVE-2022-44267 is a vulnerability in ImageMagick 7.1.0-49 that can be exploited to cause a denial of service (DoS) by leaving the convert process waiting for stdin input when parsing a PNG image.
How severe is CVE-2022-44267?
CVE-2022-44267 has a severity rating of 6.5 out of 10, making it a medium severity vulnerability.
Which software versions are affected by CVE-2022-44267?
ImageMagick versions 7.1.0-49 and lower are affected by CVE-2022-44267.
How can I fix CVE-2022-44267?
To fix CVE-2022-44267, you should update ImageMagick to version 8:6.9.10.23+dfsg-2.1+deb10u5 or newer.
Where can I find more information about CVE-2022-44267?
You can find more information about CVE-2022-44267 on the official GitHub page of ImageMagick, as well as the provided references in the description.