Internet Bug Bounty: CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()

🗓️ 11 Mar 2020 10:27:42Reported by nathaniellivesType

Internet Bug Bounty: CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage(). Out-of-bounds write vulnerability allowing exploitation during Huffman decoding of Fax images. Integer underflow, 32-bit platform. Variables 'x' and 'count' signed, file size practicality restriction, hash table code length range 0-2560. Unbounded for() loop, pixel unpacking, huffman table lookup. Loop termination conditions, count adjustment and validation

Reporter	Title	Published	Views	Family All 44
AlpineLinux	CVE-2020-10938	24 Mar 202015:28	–	alpinelinux
CNVD	GraphicsMagick Integer Overflow Vulnerability	25 Mar 202000:00	–	cnvd
CVE	CVE-2020-10938	24 Mar 202015:28	–	cve
Cvelist	CVE-2020-10938	24 Mar 202015:28	–	cvelist
Debian	[SECURITY] [DLA 2173-1] graphicsmagick security update	15 Apr 202002:29	–	debian
Debian	[SECURITY] [DSA 4675-1] graphicsmagick security update	5 May 202020:50	–	debian
Debian	[SECURITY] [DSA 4675-1] graphicsmagick security update	5 May 202020:50	–	debian
Debian CVE	CVE-2020-10938	24 Mar 202015:28	–	debiancve
Tenable Nessus	Debian DLA-2173-1 : graphicsmagick security update	15 Apr 202000:00	–	nessus
Tenable Nessus	Debian DSA-4675-1 : graphicsmagick - security update	7 May 202000:00	–	nessus