Bug 1851910 (CVE-2020-19667) - CVE-2020-19667 ImageMagick: Stack buffer overflow in XPM coder could result in a crash
Summary: CVE-2020-19667 ImageMagick: Stack buffer overflow in XPM coder could result i...
Keywords:
Status: NEW
Alias: CVE-2020-19667
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 1853993
Blocks: 1850038
TreeView+ depends on / blocked
 
Reported: 2020-06-29 12:05 UTC by Michael Kaplan
Modified: 2023-07-07 08:30 UTC (History)
4 users (show)

Fixed In Version: ImageMagick 6.9.11-7
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Michael Kaplan 2020-06-29 12:05:51 UTC 
In ImageMagick 7.0.10-7, there is an stack-buffer-overflow at /coders/xpm.c:232 in ReadXPMImage

References:

https://github.com/ImageMagick/ImageMagick/issues/1895
https://imagemagick.org/script/changelog.php

PoC:

https://raw.githubusercontent.com/minghangshen/bug_poc/master/poc2/stack-buffer-over1
Comment 1 Huzaifa S. Sidhpurwala 2020-07-06 04:50:49 UTC 
Upstream patch:
https://github.com/ImageMagick/ImageMagick6/commit/26538669546730c5b2dc36e7d48850f1f6928f94
Comment 2 Huzaifa S. Sidhpurwala 2020-07-06 04:57:13 UTC 
While there is a request for CVE assignment https://github.com/ImageMagick/ImageMagick/issues/1895#issuecomment-618110351 seems like no public assignment has been made yet or the assignment has not been updated on the MITRE site.
Note You need to log in before you can comment on or make changes to this bug.