A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Aug 29, 2022 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | May 6, 2024 | Aug 29, 2022 |
| Suse | — | Upgrade libMagickWand-7_Q16HDRI10Upgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagick++-develUpgrade perl-PerlMagickUpgrade libMagickCore-7_Q16HDRI10Upgrade libMagick++-7_Q16HDRI4Upgrade ImageMagickUpgrade libmagick-devel-32bitUpgrade libMagickCore-7_Q16HDRI6Upgrade imagemagick-config-7-upstreamUpgrade ImageMagick-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade ImageMagick-extraUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-7_Q16HDRI5Upgrade imagemagick-devel-32bitUpgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-docUpgrade ImageMagick-config-7-SUSE | Feb 22, 2022 | Feb 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub