⌘ + K

UBUNTU-CVE-2021-20224

Dashboard / Vulnerabilities / UBUNTU-CVE-2021-20224

UBUNTU-CVE-2021-20224

Published: 25 Aug 2022Last Modified: 22 Apr 2026

Upstream:

Aliases:

Summary:

Details: An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.

References: https://ubuntu.com/security/CVE-2021-20224, https://github.com/ImageMagick/ImageMagick/pull/3083, https://github.com/ImageMagick/ImageMagick/commit/5af1dffa4b6ab984b5f13d1e91c95760d75f12a6, https://github.com/ImageMagick/ImageMagick6/commit/553054c1cb1e4e05ec86237afef76a32cd7c464d, https://ubuntu.com/security/notices/USN-5736-1, https://ubuntu.com/security/notices/USN-5736-2, https://ubuntu.com/security/notices/USN-6200-1, https://www.cve.org/CVERecord?id=CVE-2021-20224

Affected packages

Package

Name: imagemagick

Purl: pkg:deb/ubuntu/imagemagick@8:6.7.7.10-6ubuntu3.13+esm3?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -8:6.7.7.10-6ubuntu3.13+esm3

Affected versions

8:6.7.7.10-5ubuntu3

8:6.7.7.10-5ubuntu4

8:6.7.7.10-6ubuntu1

8:6.7.7.10-6ubuntu2

8:6.7.7.10-6ubuntu3

8:6.7.7.10-6ubuntu3.1

8:6.7.7.10-6ubuntu3.2

8:6.7.7.10-6ubuntu3.3

8:6.7.7.10-6ubuntu3.4

8:6.7.7.10-6ubuntu3.5

8:6.7.7.10-6ubuntu3.6

8:6.7.7.10-6ubuntu3.7

8:6.7.7.10-6ubuntu3.8

8:6.7.7.10-6ubuntu3.9

8:6.7.7.10-6ubuntu3.11

8:6.7.7.10-6ubuntu3.12

8:6.7.7.10-6ubuntu3.13

8:6.7.7.10-6ubuntu3.13+esm1

8:6.7.7.10-6ubuntu3.13+esm2

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High