CVE-2020-25667: Medium severity imagemagick vulnerability
ImageMagick 7.0.8-68 there is a heap-buffer-overflow at coders/tiff.c in TIFFGetProfiles.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1748
Upstream patch: https://github.com/ImageMagick/ImageMagick/commit/986b5dff173413fa712db27eb677cdef15f0bab6
Other sources
TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for "dc:format=\"image/dng\" within profile due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25667?
CVE-2020-25667 has a high severity due to the potential for a heap buffer overflow that can lead to arbitrary code execution.
How do I fix CVE-2020-25667?
To fix CVE-2020-25667, update ImageMagick to version 7.0.9 or later, which includes the necessary patches.
What software is affected by CVE-2020-25667?
CVE-2020-25667 affects ImageMagick versions prior to 7.0.9 and all versions of ImageMagick 6.9.10-69 and earlier.
What vulnerabilities are caused by CVE-2020-25667?
CVE-2020-25667 can cause a heap buffer overflow, which may lead to denial of service or execution of arbitrary code.
Where can I find more information about CVE-2020-25667?
More information about CVE-2020-25667 can be found in the community discussions and the GitHub repository for ImageMagick.