Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-25665
5.5
MEDIUMCVSS v3
Published
December 8, 2020
CVSS v2
4.3 MEDIUM
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.
ImageMagick/ImageMagick
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.< 6.9.10-68, >= 7.0.0-0, < 7.0.8-68NVD
NPM