PublicDateAtUSN: 2020-12-08 22:15:00 UTC
Candidate: CVE-2020-25676
PublicDate: 2020-12-08 22:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25676
 https://ubuntu.com/security/notices/USN-4988-1
 https://ubuntu.com/security/notices/USN-5335-1
Description:
 In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(),
 InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all
 functions in /MagickCore/pixel.c, there were multiple unconstrained pixel
 offset calculations which were being used with the floor() function. These
 calculations produced undefined behavior in the form of out-of-range and
 integer overflows, as identified by UndefinedBehaviorSanitizer. These
 instances of undefined behavior could be triggered by an attacker who is
 able to supply a crafted input file to be processed by ImageMagick. These
 issues could impact application availability or potentially cause other
 problems related to undefined behavior. This flaw affects ImageMagick
 versions prior to 7.0.9-0.
Ubuntu-Description:
Notes:
Mitigation:
Bugs:
 https://github.com/ImageMagick/ImageMagick/issues/1732
Priority: low
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H [5.5 MEDIUM]


Patches_imagemagick:
 upstream: https://github.com/ImageMagick/ImageMagick6/commit/94aeb3c40d25aee1051ba8eb3a31601558ef2506
upstream_imagemagick: released (8:6.9.11.24+dfsg-1)
precise/esm_imagemagick: DNE
trusty_imagemagick: ignored (out of standard support)
trusty/esm_imagemagick: DNE
xenial_imagemagick: ignored (end of standard support, was needs-triage)
esm-infra/xenial_imagemagick: released (8:6.8.9.9-7ubuntu5.16+esm2)
bionic_imagemagick: released (8:6.9.7.4+dfsg-16ubuntu6.11)
focal_imagemagick: released (8:6.9.10.23+dfsg-2.1ubuntu11.4)
groovy_imagemagick: released (8:6.9.10.23+dfsg-2.1ubuntu13.3)
hirsute_imagemagick: not-affected (8:6.9.11.60+dfsg-1ubuntu1)
impish_imagemagick: not-affected (8:6.9.11.60+dfsg-1ubuntu1)
jammy_imagemagick: not-affected (8:6.9.11.60+dfsg-1ubuntu1)
devel_imagemagick: not-affected (8:6.9.11.60+dfsg-1ubuntu1)