Vulnerability Details CVE-2022-1270
In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 15.6%
CVSS Severity
CVSS v3 Score 7.8
References
- https://lists.debian.org/debian-lts-announce/2022/11/msg00028.html
- https://security.gentoo.org/glsa/202209-19
- https://sourceforge.net/p/graphicsmagick/bugs/664/
- https://www.debian.org/security/2022/dsa-5288
- https://lists.debian.org/debian-lts-announce/2022/11/msg00028.html
- https://security.gentoo.org/glsa/202209-19
- https://sourceforge.net/p/graphicsmagick/bugs/664/
- https://www.debian.org/security/2022/dsa-5288
Products affected by CVE-2022-1270
-
cpe:2.3:a:graphicsmagick:graphicsmagick:1.4.020220326
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:11.0