EPSS
Percentile
34.6%
imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage() in coders/png.c allows an attacker to execute arbitrary code via a malicious file.
WriteOnePNGImage()
coders/png.c
bugzilla.redhat.com/show_bug.cgi?id=1891928
lists.debian.org/debian-lts-announce/2021/01/msg00010.html
security-tracker.debian.org/tracker/CVE-2020-25674