CVE-2022-1270

2022-09-2820:15:10

CWE-119

CWE-787

[email protected]

web.nvd.nist.gov

graphicsmagick

heap buffer overflow

miff

cve-2022-1270

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

27.1%

JSON

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.

Affected configurations

Nvd

Node

graphicsmagickgraphicsmagickMatch1.4.020220326

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

VendorProductVersionCPE
graphicsmagickgraphicsmagick1.4.020220326cpe:2.3:a:graphicsmagick:graphicsmagick:1.4.020220326:*:*:*:*:*:*:*
debiandebian_linux10.0cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
debiandebian_linux11.0cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
graphicsmagick	graphicsmagick	1.4.020220326	cpe:2.3:a:graphicsmagick:graphicsmagick:1.4.020220326:::::::*
debian	debian_linux	10.0	cpe:2.3:o:debian:debian_linux:10.0:::::::*
debian	debian_linux	11.0	cpe:2.3:o:debian:debian_linux:11.0:::::::*