UBUNTU-CVE-2020-25665

Dashboard / Vulnerabilities / UBUNTU-CVE-2020-25665

UBUNTU-CVE-2020-25665

Summary:

Details: The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.

References: https://ubuntu.com/security/CVE-2020-25665, https://ubuntu.com/security/notices/USN-4988-1, https://ubuntu.com/security/notices/USN-5335-1, https://www.cve.org/CVERecord?id=CVE-2020-25665, https://ubuntu.com/security/notices/USN-7068-1