CVE-2020-25667

Summary

TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for "dc:format=\"image/dng\" within profile due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.

Affected Software

VendorProductVersion RangeStatus
n/aImageMagickprior to 7.0.9-0affected

Weaknesses

  • CWE-122: CWE-122->CWE-125

ADP Enrichment

CVE Program Container

Additional References

References