PT-2019-5853 · Imagemagick+5 · Imagemagick+5
Guilherme De Almeida Suckevicz
+1
·
Published
2019-10-04
·
Updated
2024-10-15
·
CVE-2020-25674
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.0.8-68
Description
The issue is related to the
WriteOnePNGImage() function from coders/png.c (the PNG coder) which has a for loop with an improper exit condition. This can allow an out-of-bounds READ via heap-buffer-overflow because the loop condition will attempt to pass invalid colormap data to the event logger if the colormap has less than 256 valid values. The flaw could impact application availability when a specially crafted input file is processed by ImageMagick.Recommendations
For ImageMagick versions prior to 7.0.8-68, update to version 7.0.8-68 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
WriteOnePNGImage() function until a patch is available. Avoid using specially crafted input files that could trigger the heap-buffer-overflow.Exploit
Fix
Out of bounds Read
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu