{"id":"CVE-2022-0284","details":"A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.","modified":"2026-11-04T13:05:16.504090611Z","published":"2022-08-29T14:03:03Z","related":["SUSE-SU-2022:0540-1","SUSE-SU-2023:4634-1","openSUSE-SU-2022:0540-1","openSUSE-SU-2024:13263-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0284.json","cna_assigner":"redhat","cwe_ids":["CWE-125"]},"references":[{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2022-0284"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0284.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0284"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045943"},{"type":"REPORT","url":"https://github.com/ImageMagick/ImageMagick/issues/4729"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"660e30fd68a24d677adfa0d462962298d6b9fe34"},{"fixed":"e50f19fd73c792ebe912df8ab83aa51a243a3da7"}],"database_specific":{"extracted_events":[{"strategy":"StandaloneSingleVersion","range":[{"introduced":"Fixed in ImageMagick-7.1.0-20"},{"last_affected":"Fixed in ImageMagick-7.1.0-20"}],"source":"AFFECTED_FIELD"},{"range":[{"fixed":"e50f19fd73c792ebe912df8ab83aa51a243a3da7"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["Fixed in ImageMagick-7.1.0-20","7.1.2-35","7.1.2-34","7.1.2-33","7.1.2-32","7.1.2-31","7.1.2-30","7.1.2-29","7.1.2-28","7.1.2-27","7.1.2-26","7.1.2-25","7.1.2-24","7.1.2-23","7.1.2-22","7.1.2-21","7.1.2-20","7.1.2-19","7.1.2-18","7.1.2-17","7.1.2-16","7.1.2-15","7.1.2-14","7.1.2-13","7.1.2-12","7.1.2-11","7.1.2-10","7.1.2-9","7.1.2-8","7.1.2-7","7.1.2-6","7.1.2-5","7.1.2-3","7.1.2-2","7.1.2-1","7.1.2-0","7.1.1-47","7.1.1-46","7.1.1-45","7.1.1-44","7.1.1-43","7.1.1-41","7.1.1-40","7.1.1-39","7.1.1-38","7.1.1-37","7.1.1-36","7.1.1-35","7.1.1-34","7.1.1-33","7.1.1-32","7.1.1-31","7.1.1-30","7.1.1-29","7.1.1-28","7.1.1-27","7.1.1-26","7.1.1-25","7.1.1-24","7.1.1-23","7.1.1-22","7.1.1-21","7.1.1-20","7.1.1-19","7.1.1-18","7.1.1-17","7.1.1-16","7.1.1-15","7.1.1-14","7.1.1-13","7.1.1-12","7.1.1-11","7.1.1-10","7.1.1-9","7.1.1-8","7.1.1-7","7.1.1-6","7.1.1-5","7.1.1-4","7.1.1-3","7.1.1-2","7.1.1-1","7.1.1-0","7.1.0-62","7.1.0-61","7.1.0-60","7.1.0-59","7.1.0-58","7.1.0-57","7.1.0-56","7.1.0-55","7.1.0-54","7.1.0-53","7.1.0-52","7.1.0-51","7.1.0-50","7.1.0-49","7.1.0-48","7.1.0-47","7.1.0-46","7.1.0-45","7.1.0-44","7.1.0-43","7.1.0-42","7.1.0-41","7.1.0-40","7.1.0-39","7.1.0-38","7.1.0-37","7.1.0-36","7.1.0-35","7.1.0-34","7.1.0-33","7.1.0-32","7.1.0-31","7.1.0-30","7.1.0-29","7.1.0-28","7.1.0-27","7.1.0-26","7.1.0-25","7.1.0-24","7.1.0-23","7.1.0-22","7.1.0-21","7.1.0-20"],"database_specific":{"vanir_signatures_modified":"2026-11-04T13:05:16Z","source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0284.json","vanir_signatures":[{"target":{"file":"coders/xpm.c","function":"WritePICONImage"},"deprecated":false,"digest":{"function_hash":"252425566050560855263177976518073506626","length":7880},"id":"CVE-2022-0284-60534e20","signature_type":"Function","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7"},{"deprecated":false,"digest":{"line_hashes":["87797395018650578211231814916421761121","200106990445893197953560268294270841294","95033872146013753876397730148199448005","41368052442698052330347212203678365153","87797395018650578211231814916421761121","201884265620066507831964570507506796376","107880667450026525286913478423459820960","328039202767865005710053993471843480653"],"threshold":0.9},"id":"CVE-2022-0284-6edf2fec","signature_type":"Line","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7","target":{"file":"coders/xpm.c"}}]}}],"schema_version":"1.9.2"}