CVEvulnerability
CVE-2020-25663
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-12-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-416
Description
A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further because the memory is used as pixel data and not e.g. a function pointer. This flaw affects ImageMagick versions prior to 7.0.9-0.
Affected configurations
• imagemagick imagemagick (< 7.0.8-56)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1891601 Issue Tracking, Patch, Third Party Advisory
- https://github.com/ImageMagick/ImageMagick/issues/1723 Exploit, Third Party Advisory
- https://github.com/ImageMagick/ImageMagick/issues/1723#issuecomment-718275153 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1891601 Issue Tracking, Patch, Third Party Advisory
- https://github.com/ImageMagick/ImageMagick/issues/1723 Exploit, Third Party Advisory
- https://github.com/ImageMagick/ImageMagick/issues/1723#issuecomment-718275153 Third Party Advisory