2 matches found
ImageMagick Input Validation Error Vulnerability (CNVD-2021-25967)
Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.9-0, which stems...
4.3CVSS7.5AI score0.01177EPSS
SaveExploits1References1
CVE-2020-25666: Integer Overflow or Wraparound
There are 4 places in HistogramCompare in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and count value for a color. The patch uses casts to ssizet type for these calculations, instead of int. This flaw could impact...
4.3CVSS5.5AI score0.01177EPSS
SaveExploits1References2
20