CVE-2020-25666: Integer Overflow
ImageMagick 7.0.8-68 there are 4 outside the range of representable values of type 'int' and a signed integer overflow at MagickCore/histogram.c.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1750
Upstream patch: https://github.com/ImageMagick/ImageMagick/commit/94691f00839dbdf43edb1508af945ab19b388573
Other sources
There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and count value for a color. The patch uses casts to ssizet type for these calculations, instead of int. This flaw could impact application reliability in the event that ImageMagick processes a crafted input file. This flaw affects ImageMagick versions prior to 7.0.9-0.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25666?
CVE-2020-25666 is a vulnerability in ImageMagick, specifically in the HistogramCompare() function in MagickCore/histogram.c.
How severe is CVE-2020-25666?
CVE-2020-25666 has a severity score of 3.3, which is considered medium.
What is the affected software and versions for CVE-2020-25666?
The affected software is ImageMagick, and the vulnerable versions are 8:6.9.7.4+dfsg-16ubuntu6.11, 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.10.23+dfsg-2.1ubuntu13.3, and 8:6.9.11.24+dfsg-1.
How can I fix CVE-2020-25666?
To fix CVE-2020-25666, update ImageMagick to versions 8:6.9.7.4+dfsg-16ubuntu6.11, 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.10.23+dfsg-2.1ubuntu13.3, or 8:6.9.11.24+dfsg-1.
Where can I find more information about CVE-2020-25666?
You can find more information about CVE-2020-25666 at the following references: [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25666), [Ubuntu Security Notices](https://ubuntu.com/security/notices/USN-4988-1), and [NVD](https://nvd.nist.gov/vuln/detail/CVE-2020-25666).