PT-2020-5732 · David Tschumperle · Cimg

Published 2020-10-22 · Updated 2021-05-05 · CVE-2020-25693

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions: CImg versions prior to 2.9.3

Description: A flaw in CImg can be triggered by a specially crafted input file, leading to integer overflows and heap buffer overflows in the load pnm() function. This can impact application availability or data integrity. The issue can be exploited by a remote attacker using a specially crafted file, potentially affecting the confidentiality, integrity, and availability of protected information.

Recommendations: For versions prior to 2.9.3, update to version 2.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the load pnm() function until a patch is available. Avoid using specially crafted input files that could trigger the integer overflows and heap buffer overflows.

Exploit

Fix

Integer Overflow

Heap Based Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-122

CWE-787

Related Identifiers

BDU:2021-01646

CVE-2020-25693

DLA-2462-1

MGASA-2020-0443

Affected Products

Cimg

References · 21

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1893377 · Exploit
• https://osv.dev/vulnerability/CVE-2020-25693 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0443 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-25693 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ERBZALTF7LXN2LZLPGAUSVMV53GHHTUC · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25693 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-25693 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MJ5Q7NNUPXATTBUKHFKIYYAV5GJDYCZL · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01646 · Security Note
• https://osv.dev/vulnerability/DLA-2462-1 · Vendor Advisory
• https://debian.org/lts/security/2020/dla-2462 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0443.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-25693 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QZ3NPLYXZWEL7HETIFZVCXEZZ2WYYRWA · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25693 · Vendor Advisory