Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 712038 - media-gfx/imagemagick: Out-of-bounds read in ReadHEICImageByID in coders\heic.c (CVE-2020-10251)
Summary: media-gfx/imagemagick: Out-of-bounds read in ReadHEICImageByID in coders\heic...
Status: RESOLVED DUPLICATE of bug 712036
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://github.com/ImageMagick/ImageM...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-03-10 08:01 UTC by Sam James
Modified: 2020-03-10 08:05 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2020-03-10 08:01:14 UTC
Description:
"In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image."

Bug: https://github.com/ImageMagick/ImageMagick/issues/1859
Patch: https://github.com/ImageMagick/ImageMagick/commit/868aad754ee599eb7153b84d610f2ecdf7b339f6

Does not seem to have been included in a release yet, but patch can be applied.
Comment 1 Agostino Sarubbo gentoo-dev 2020-03-10 08:03:45 UTC

*** This bug has been marked as a duplicate of bug 712036 ***