Bug 712038

Summary:	media-gfx/imagemagick: Out-of-bounds read in ReadHEICImageByID in coders\heic.c (CVE-2020-10251)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	graphics+disabled
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://github.com/ImageMagick/ImageMagick/issues/1859
Whiteboard:
Package list:		Runtime testing required:	---

Description Sam James archtester

2020-03-10 08:01:14 UTC

Description:
"In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image."

Bug: https://github.com/ImageMagick/ImageMagick/issues/1859
Patch: https://github.com/ImageMagick/ImageMagick/commit/868aad754ee599eb7153b84d610f2ecdf7b339f6

Does not seem to have been included in a release yet, but patch can be applied.

Comment 1 Agostino Sarubbo gentoo-dev

2020-03-10 08:03:45 UTC


*** This bug has been marked as a duplicate of bug 712036 ***