CVE-2020-25664: Medium severity imagemagick vulnerability
In ImageMagick, there is a heap-buffer-overflow at MagickCore/quantum-private.h:227:12 in PopShortPixel.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1716
Upstream patch: https://github.com/ImageMagick/ImageMagick/commit/1f450bb5ba53d275de6d1cd086c98a0b549ad393
Other sources
In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25664?
CVE-2020-25664 is a vulnerability in the PNG coder of ImageMagick that allows for an out-of-bounds write and can be exploited by an attacker.
How severe is CVE-2020-25664?
CVE-2020-25664 has a severity rating of 6.1 (medium).
What software is affected by CVE-2020-25664?
ImageMagick versions 8:6.9.11.24+dfsg-1 and earlier, 8:6.8.9.9-7ubuntu5.16+ and earlier, ImageMagick 7.0.8-68 and earlier, and ImageMagick 6.9.10-68 and earlier are affected.
How can I fix CVE-2020-25664?
To fix CVE-2020-25664, update ImageMagick to version 8:6.9.11.24+dfsg-1.3+deb11u1 or 8:6.9.11.60+dfsg-1.6 or later.
Where can I find more information about CVE-2020-25664?
You can find more information about CVE-2020-25664 on the CVE Mitre website, Ubuntu security notices, and NIST NVD.