Логотип exploitDog
bind:CVE-2020-25676
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2020-25676

Количество 11

Количество 11

ubuntu логотип

CVE-2020-25676

около 5 лет назад

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2020-25676

больше 6 лет назад

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2020-25676

около 5 лет назад

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2020-25676

около 5 лет назад

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), Inte ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-cpwv-crhw-cf7v

больше 3 лет назад

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2021-03416

больше 6 лет назад

Уязвимость функций CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), InterpolatePixelInfo() компонента /MagickCore/pixel.c консольного графического редактора ImageMagick, связанная с целочисленным переполнением значения, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0199-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0153-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0148-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:0136-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0156-1

около 5 лет назад

Security update for ImageMagick

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-25676

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
0%
Низкий
около 5 лет назад
redhat логотип
CVE-2020-25676

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
0%
Низкий
больше 6 лет назад
nvd логотип
CVE-2020-25676

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
0%
Низкий
около 5 лет назад
debian логотип
CVE-2020-25676

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), Inte ...

CVSS3: 5.5
0%
Низкий
около 5 лет назад
github логотип
GHSA-cpwv-crhw-cf7v

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS3: 5.5
0%
Низкий
больше 3 лет назад
fstec логотип
BDU:2021-03416

Уязвимость функций CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), InterpolatePixelInfo() компонента /MagickCore/pixel.c консольного графического редактора ImageMagick, связанная с целочисленным переполнением значения, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.3
0%
Низкий
больше 6 лет назад
suse-cvrf логотип
SUSE-SU-2021:0199-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0153-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0148-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
openSUSE-SU-2021:0136-1

Security update for ImageMagick

около 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0156-1

Security update for ImageMagick

около 5 лет назад

Уязвимостей на страницу