CVE-2020-25667

State: Published
Severity: Not scored
Published: Dec 8, 2020
Updated: Aug 4, 2024
Reserved: Sep 16, 2020

Description

TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.

Scores

The record has no CVSS score.

Weaknesses

CWE-122 >CWE-125

Affected Products

Product	Versions
ImageMagickn/a	prior to 7.0.9-0Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1891613

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.