cbcvebase.
CVE-2020-25676
published 2020-12-08

CVE-2020-25676: In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in…

PriorityP422medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
1.17%
63.9th percentile
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Affected

10 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianimagemagick< imagemagick 8:6.9.11.24+dfsg-1 (bookworm)imagemagick 8:6.9.11.24+dfsg-1 (bookworm)
imagemagickimagemagick< 6.9.10-696.9.10-69
imagemagickimagemagick
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm2
imagemagickimagemagick>= 7.0.0-0 < 7.0.9-07.0.9-0

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.5MEDIUM
vendor_ubuntu6.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.