Lucene search
+L

2 matches found

CNVD
CNVD
•added 2020/12/15 12:00 a.m.•58 views

ImageMagick Input Validation Error Vulnerability (CNVD-2021-25967)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.9-0, which stems...

4.3CVSS7.5AI score0.01177EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/08 12:00 a.m.•3 views

CVE-2020-25666: Integer Overflow or Wraparound

There are 4 places in HistogramCompare in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and count value for a color. The patch uses casts to ssizet type for these calculations, instead of int. This flaw could impact...

4.3CVSS5.5AI score0.01177EPSS
SaveExploits1References2
Rows per page
Query Builder