CVE-2022-1270

Description

References

• lists.debian.org/debian-lts-announce/2022/11/msg00028.html · Mailing List
• security.gentoo.org/glsa/202209-19 · Third Party Advisory
• sourceforge.net/p/graphicsmagick/bugs/664 · Exploit
• debian.org/security/2022/dsa-5288 · Third Party Advisory

graphicsmagick 的其他漏洞

• CVE-2025-32460严重 9.1GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
• CVE-2025-27796严重 9.8ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory i…
• CVE-2025-27795高危 7.5ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
• CVE-2020-21679中危 5.5Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service …
• CVE-2020-12672高危 7.5GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.