deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-9954
Published: 2020-12-08
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 7.0, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Playing a malicious audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211849
CVE: CVE-2020-9963
Published: 2020-12-08
Description: The issue was addressed with improved handling of icon caches. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious app may be able to determine the existence of files on the computer.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211850; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-9965
Published: 2020-12-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844
CVE: CVE-2020-9966
Published: 2020-12-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844
CVE: CVE-2020-9969
Published: 2020-12-08
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. A local user may be able to view senstive user information.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844
CVE: CVE-2020-9972
Published: 2020-12-08
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT211850; https://support.apple.com/kb/HT212003; https://support.apple.com/kb/HT212005
CVE: CVE-2020-9974
Published: 2020-12-08
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to determine kernel memory layout.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-9977
Published: 2020-12-08
Description: A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to determine a user's open tabs in Safari.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211850; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-9981
Published: 2020-12-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT211843; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211849
CVE: CVE-2020-9987
Published: 2020-12-08
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 14.0. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://support.apple.com/en-us/HT211845; https://support.apple.com/en-us/HT211845
CVE: CVE-2020-9988
Published: 2020-12-08
Description: The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211850; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-9989
Published: 2020-12-08
Description: The issue was addressed with improved deletion. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A local user may be able to discover a user’s deleted messages.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9993
Published: 2020-12-08
Description: The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://support.apple.com/en-us/HT211844; https://support.apple.com/en-us/HT211845; https://support.apple.com/en-us/HT211850
CVE: CVE-2020-9996
Published: 2020-12-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211850; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-9999
Published: 2020-12-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211931; https://support.apple.com/en-us/HT211952
CVE: CVE-2020-10017
Published: 2020-12-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-25663
Published: 2020-12-08
Description: A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further because the memory is used as pixel data and not e.g. a function pointer. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891601; https://github.com/ImageMagick/ImageMagick/issues/1723; https://github.com/ImageMagick/ImageMagick/issues/1723#issuecomment-718275153
CVE: CVE-2020-25664
Published: 2020-12-08
Description: In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-122
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891605; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z3J6D7POCQYQKNVRDYLTTPM5SQC3WVTR/; https://bugzilla.redhat.com/show_bug.cgi?id=1891605
CVE: CVE-2020-25665
Published: 2020-12-08
Description: The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891606; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-25666
Published: 2020-12-08
Description: There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and `count` value for a color. The patch uses casts to `ssize_t` type for these calculations, instead of `int`. This flaw could impact application reliability in the event that ImageMagick processes a crafted input file. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891612; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-25667
Published: 2020-12-08
Description: TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891613; https://bugzilla.redhat.com/show_bug.cgi?id=1891613
CVE: CVE-2020-27895
Published: 2020-12-08
Description: An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT211933; https://support.apple.com/en-us/HT211933
CVE: CVE-2020-27898
Published: 2020-12-08
Description: A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27900
Published: 2020-12-08
Description: An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to preview files it does not have access to.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211931; http://seclists.org/fulldisclosure/2020/Dec/32
CVE: CVE-2020-27902
Published: 2020-12-08
Description: An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A person with physical access to an iOS device may be able to access stored passwords without authentication.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-306
References: https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211929
CVE: CVE-2020-27903
Published: 2020-12-08
Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27904
Published: 2020-12-08
Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2020/Dec/32; http://seclists.org/fulldisclosure/2021/Feb/14; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27905
Published: 2020-12-08
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211930
CVE: CVE-2020-27906
Published: 2020-12-08
Description: Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211931
CVE: CVE-2020-27909
Published: 2020-12-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929
CVE: CVE-2020-27910
Published: 2020-12-08
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-27911
Published: 2020-12-08
Description: An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-27912
Published: 2020-12-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-27916
Published: 2020-12-08
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/26; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-27917
Published: 2020-12-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929
CVE: CVE-2020-27925
Published: 2020-12-08
Description: An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT211929; https://support.apple.com/en-us/HT211929
CVE: CVE-2020-27926
Published: 2020-12-08
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://seclists.org/fulldisclosure/2020/Dec/26; https://support.apple.com/en-us/HT211929; https://support.apple.com/kb/HT212011
CVE: CVE-2020-27927
Published: 2020-12-08
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted font file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928; https://support.apple.com/en-us/HT211929
CVE: CVE-2020-27929
Published: 2020-12-08
Description: A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.4.9. A user may send video in Group FaceTime calls without knowing that they have done so.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT211940; https://support.apple.com/en-us/HT211940
CVE: CVE-2020-27930
Published: 2020-12-08
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. Processing a maliciously crafted font may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://packetstormsecurity.com/files/161294/Apple-Safari-Remote-Code-Execution.html; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-27932
Published: 2020-12-08
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843, CWE-843
References: http://packetstormsecurity.com/files/161295/XNU-Kernel-Turnstiles-Type-Confusion.html; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-27950
Published: 2020-12-08
Description: A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665, CWE-665
References: http://packetstormsecurity.com/files/161296/XNU-Kernel-Mach-Message-Trailers-Memory-Disclosure.html; http://seclists.org/fulldisclosure/2020/Dec/32; https://support.apple.com/en-us/HT211928
CVE: CVE-2020-25674
Published: 2020-12-08
Description: WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891928; https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-25675
Published: 2020-12-08
Description: In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a negative impact to application availability or other problems related to undefined behavior, in cases where ImageMagick processes untrusted input data. The upstream patch introduces functionality to constrain the pixel offsets and prevent these issues. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 3.3 (LOW)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891933; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE: CVE-2020-25676
Published: 2020-12-08
Description: In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by UndefinedBehaviorSanitizer. These instances of undefined behavior could be triggered by an attacker who is able to supply a crafted input file to be processed by ImageMagick. These issues could impact application availability or potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1891934; https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html