This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2022-44638 →
ALPINE-CVE-2022-44638
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow...
Original description
The description as published by the source.
In libpixman in Pixman before 0.42.2, there is an out-of-bounds write (aka heap-based buffer overflow) in rasterize_edges_8 due to an integer overflow in pixman_sample_floor_y.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.13
pixman
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-r3"}]}]
Alpine:v3.14
pixman
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-r3"}]}]
Alpine:v3.15
pixman
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-r4"}]}]
Alpine:v3.16
pixman
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.40.0-r4"}]}]
References
- advisory security.alpinelinux.org