CVE-2022-3213

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-321306.174cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/down_resume/total/naturCVE-2022-321316.174cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /index/notice/show.CVE-2022-321366.5In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resCVE-2022-321378.8In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting CVE-2022-321388.8In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-sCVE-2022-321396.5In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denialCVE-2022-32149.8Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. VeCVE-2022-321406.5Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer cCVE-2022-321416.5Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, whicCVE-2022-321428.1Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalCVE-2022-321438.8In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware filesCVE-2022-321448.6There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to servi