{"id":"CVE-2022-0284","details":"A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.","modified":"2026-10-28T10:23:14.903216417Z","published":"2022-08-29T14:03:03Z","related":["SUSE-SU-2022:0540-1","SUSE-SU-2023:4634-1","openSUSE-SU-2022:0540-1","openSUSE-SU-2024:13263-1"],"database_specific":{"cwe_ids":["CWE-125"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0284.json","cna_assigner":"redhat"},"references":[{"type":"WEB","url":"https://access.redhat.com/security/cve/CVE-2022-0284"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0284.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0284"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045943"},{"type":"REPORT","url":"https://github.com/ImageMagick/ImageMagick/issues/4729"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"660e30fd68a24d677adfa0d462962298d6b9fe34"},{"fixed":"e50f19fd73c792ebe912df8ab83aa51a243a3da7"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"Fixed in ImageMagick-7.1.0-20"},{"last_affected":"Fixed in ImageMagick-7.1.0-20"}],"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion"},{"range":[{"fixed":"e50f19fd73c792ebe912df8ab83aa51a243a3da7"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["Fixed in ImageMagick-7.1.0-20"],"database_specific":{"vanir_signatures_modified":"2026-10-28T10:23:14Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0284.json","vanir_signatures":[{"source":"https://github.com/imagemagick/imagemagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7","target":{"function":"WritePICONImage","file":"coders/xpm.c"},"deprecated":false,"digest":{"function_hash":"252425566050560855263177976518073506626","length":7880},"id":"CVE-2022-0284-60534e20","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/imagemagick/imagemagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7","target":{"file":"coders/xpm.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["87797395018650578211231814916421761121","200106990445893197953560268294270841294","95033872146013753876397730148199448005","41368052442698052330347212203678365153","87797395018650578211231814916421761121","201884265620066507831964570507506796376","107880667450026525286913478423459820960","328039202767865005710053993471843480653"]},"id":"CVE-2022-0284-6edf2fec","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.9.2"}