CVE-2020-25674: Medium severity imagemagick vulnerability
In ImageMagick 7.0.8-67 there is a heap-buffer-overflow at coders/png.c:9026:46 in WriteOnePNGImage.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1715
Upstream patch: https://github.com/ImageMagick/ImageMagick/commit/67b871032183a29d3ca0553db6ce1ae80fddb9aa
Other sources
WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25674?
CVE-2020-25674 is a vulnerability in the PNG coder of the ImageMagick software that allows an out-of-bounds READ via heap-buffer-overflow.
What is the severity of CVE-2020-25674?
The severity of CVE-2020-25674 is medium with a CVSS score of 5.5.
How does CVE-2020-25674 affect ImageMagick?
CVE-2020-25674 affects ImageMagick versions 6.9.7.4+dfsg-16ubuntu6.11 and 8:6.8.9.9-7ubuntu5.16+, 8:6.9.10.23+dfsg-2.1ubuntu11.4 and 8:6.9.10.23+dfsg-2.1ubuntu13.3, 8:6.9.11.24+dfsg-1, and 8:6.9.10.23+dfsg-2.1+deb10u5, 8:6.9.11.60+dfsg-1.3+deb11u1, and 8:6.9.11.60+dfsg-1.6.
How can I fix CVE-2020-25674 in Ubuntu?
To fix CVE-2020-25674 in Ubuntu, update ImageMagick to version 6.9.7.4+dfsg-16ubuntu6.11 or higher, or 8:6.8.9.9-7ubuntu5.16+ or higher.
Where can I find more information about CVE-2020-25674?
You can find more information about CVE-2020-25674 on the CVE website: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25674