Vulnerability Details : CVE-2022-3213

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

Vulnerability category: OverflowMemory CorruptionDenial of service

Published 2022-09-19 18:15:10

Updated 2022-09-21 18:52:38

Source Red Hat, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-3213

Probability of exploitation activity in the next 30 days: 0.05%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 18 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2022-3213

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	1.8	3.6	nvd@nist.gov
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2022-3213

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: secalert@redhat.com (Secondary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-3213

https://access.redhat.com/security/cve/CVE-2022-3213

CVE-2022-3213- Red Hat Customer Portal
Third Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/30ccf9a0da1f47161b5935a95be854fe84e6c2a2

squash heap-buffer-overflow, PoC TIFF from Hardik · ImageMagick/ImageMagick@30ccf9a · GitHub
Patch;Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2126824

2126824 – (CVE-2022-3213) CVE-2022-3213 ImageMagick: heap buffer overflow while processing a malformed TIFF file
Issue Tracking;Patch;Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/1aea203eb36409ce6903b9e41fe7cb70030e8750

squash heap-buffer-overflow, PoC TIFF from Hardik · ImageMagick/ImageMagick6@1aea203 · GitHub
Patch;Third Party Advisory

Products affected by CVE-2022-3213

Imagemagick » Imagemagick
Versions before (<) 6.9.12-62
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Matching versions
Imagemagick » Imagemagick
Versions from including (>=) 7.1.0-0 and before (<) 7.1.0-47
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 36
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 37
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Extra Packages For Enterprise Linux » Version: 8.0
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Extra Packages For Enterprise Linux » Version: 9.0
cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:9.0:*:*:*:*:*:*:*
Matching versions