CVE-2020-25676
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
EPSS 1.19% · 67.4th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:16.04:LTS | imagemagick | 8:6.8.9.9-7ubuntu5.1, 8:6.8.9.9-5ubuntu2, 8:6.8.9.9-6 |
| Ubuntu:20.04:LTS | imagemagick | 0, 8:6.9.10.23+dfsg-2.1ubuntu8, 8:6.9.10.23+dfsg-2.1ubuntu9 |
| Ubuntu:18.04:LTS | imagemagick | 8:6.9.7.4+dfsg-16ubuntu6.8, *, 0 |
Timeline
- Dec 8, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 26, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 6, 2022 EPSS Score
- Sep 10, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-25676 advisory
- https://ubuntu.com/security/notices/USN-4988-1 advisory
- https://ubuntu.com/security/notices/USN-5335-1 advisory
- https://ubuntu.com/security/notices/USN-7068-1 advisory
- https://www.cve.org/CVERecord?id=CVE-2020-25676 third-party-advisory