Lucene search

K
redhatcveRedhat.comRH:CVE-2020-25674
HistoryNov 24, 2020 - 7:23 p.m.

CVE-2020-25674

2020-11-2419:23:30
redhat.com
access.redhat.com
6
imagemagick
colormap
loop condition

EPSS

0.001

Percentile

34.6%

A flaw was found in ImageMagick. When the colormap has less than 256 valid values, the loop condition will continue to loop 256 times, attempting to pass invalid colormap data to the event logger, leading to an improper exit condition and an out-of-bounds read via heap-buffer-overflow. The highest threat from this vulnerability is to system availability.