CVE-2022-32545: Fedoraproject Extra Packages For Enterprise Linux

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 8.0 only
• Fedoraproject Fedora: version 36 only
• ImageMagick ImageMagick: before 6.9.12-43 (fixed in 6.9.12-43); from 7.1.0, before 7.1.0-28 (fixed in 7.1.0-28)
• Red Hat Enterprise Linux: version 7.0 only

Published 2022-06-16. Last modified 2026-06-17.