SecuritySpace - CVE-2020-27754

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2020-27754

Description: In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.

Test IDs: 1.3.6.1.4.1.25623.1.1.1.2.2023.3357

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-27754
https://bugzilla.redhat.com/show_bug.cgi?id=1894231
https://bugzilla.redhat.com/show_bug.cgi?id=1894231
https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html
https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

CVE ID:	CVE-2020-27754
Description:	In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.
Test IDs:	1.3.6.1.4.1.25623.1.1.1.2.2023.3357
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-27754 https://bugzilla.redhat.com/show_bug.cgi?id=1894231 https://bugzilla.redhat.com/show_bug.cgi?id=1894231 https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html