Vulnerability · Published Dec 8, 2020 · Assigned by redhat

CVE-2020-25667

Medium 5.5

In plain English

A medium-severity heap buffer overflow in ImageMagick. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)1.2%top 31.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.

Affected products (as reported)

Vendor	Product	Versions
n/a	ImageMagick	prior to 7.0.9-0

Weakness: CWE-122

References

https://bugzilla.redhat.com/show_bug.cgi?id=1891613 x_refsource_MISC