CVE-2022-32546: Fedoraproject Extra Packages For Enterprise Linux

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.

Affected products

• Fedoraproject Extra Packages For Enterprise Linux: version 8.0 only
• Fedoraproject Fedora: version 36 only
• ImageMagick ImageMagick: before 6.9.12-44 (fixed in 6.9.12-44); from 7.1.0, before 7.1.0-29 (fixed in 7.1.0-29)
• Red Hat Enterprise Linux: version 6.0 only; version 7.0 only

Published 2022-06-16. Last modified 2026-06-17.