Medium severity5.5NVD Advisory· Published Aug 29, 2022· Updated Jun 17, 2026
CVE-2022-1115
CVE-2022-1115
Description
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
5- github.com/ImageMagick/ImageMagick/commit/c8718305f120293d8bf13724f12eed885d830b09nvdPatchThird Party Advisory
- github.com/ImageMagick/ImageMagick6/commit/1f860f52bd8d58737ad883072203391096b30b51nvdPatchThird Party Advisory
- github.com/ImageMagick/ImageMagick/issues/4974nvdExploitIssue TrackingThird Party Advisory
- access.redhat.com/security/cve/CVE-2022-1115nvdIssue TrackingThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.