CVE-2022-28463

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.1.0-27

Description The issue is related to a buffer overflow in the implementation of the PushLongPixel() function in the ImageMagick graphic editor. This can be exploited by an attacker using a specially crafted image file, potentially leading to a denial of service or unauthorized access to protected information.

Recommendations For ImageMagick version 7.1.0-27, consider disabling the PushLongPixel() function as a temporary workaround until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.