PT-2019-5855 · Imagemagick+5 · Imagemagick+5

Guilherme De Almeida Suckevicz

+1

·

Published

2019-10-08

·

Updated

2024-10-15

·

CVE-2020-25676

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0
Description The issue is related to multiple unconstrained pixel offset calculations in functions CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo() in /MagickCore/pixel.c. These calculations produced undefined behavior, including out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. An attacker could trigger these instances of undefined behavior by supplying a crafted input file to be processed by ImageMagick, potentially impacting application availability or causing other problems.
Recommendations For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable functions until a patch is available. Avoid using crafted input files that could trigger the undefined behavior.

Exploit

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2019-3182
ALT-PU-2020-1405
BDU:2021-03416
CVE-2020-25676
DLA-2602-1
DLA-3357-1
DLA-3357-2
OESA-2021-1148
OPENSUSE-SU-2021:0136-1
OPENSUSE-SU-2021:0148-1
OPENSUSE-SU-2021_0136-1
OPENSUSE-SU-2021_0148-1
SUSE-SU-2021:0153-1
SUSE-SU-2021:0156-1
SUSE-SU-2021:0199-1
USN-4988-1
USN-5335-1
USN-7068-1

Affected Products

Alt Linux
Astra Linux
Imagemagick
Linuxmint
Suse
Ubuntu