CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.

• CWE-125
• CWE-125

• https://access.redhat.com/security/cve/CVE-2022-0284Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2045943Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/4729Exploit, Issue Tracking, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2022-0284Issue Tracking, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2045943Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/4729Exploit, Issue Tracking, Third Party Advisory

Published

Aug 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0278Cross-site Scripting (XSS) - Stored in Packagist microweber/…5.4
• CVE-2022-0279The AnyComment WordPress plugin before 0.2.18 is affected by…3.1
• CVE-2022-0280A race condition vulnerability exists in the QuickClean feat…7
• CVE-2022-0281Exposure of Sensitive Information to an Unauthorized Actor i…7.5
• CVE-2022-0282Cross-site Scripting in Packagist microweber/microweber prio…7.5
• CVE-2022-0283An issue has been discovered affecting GitLab versions prior…6.1
• CVE-2022-0285Cross-site Scripting (XSS) - Stored in Packagist pimcore/pim…5.4
• CVE-2022-0286A flaw was found in the Linux kernel. A null pointer derefer…5.5
• CVE-2022-0287The myCred WordPress plugin before 2.4.4.1 does not have any…4.3
• CVE-2022-0288The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter …6.1
• CVE-2022-0289Use after free in Safe browsing in Google Chrome prior to 97…8.8
• CVE-2022-0290Use after free in Site isolation in Google Chrome prior to 9…9.6