Bug 1166225 – VUL-1: CVE-2020-10251: GraphicsMagick,ImageMagick: out-of-bounds read vulnerability in the HEIC decoder triggered by images with a width or height value that exceeds the actual size of the image

Bug 1166225 - (CVE-2020-10251) VUL-1: CVE-2020-10251: GraphicsMagick,ImageMagick: out-of-bounds read vulnerability in the HEIC decoder triggered by images with a width or height value that exceeds the actual size of the image

(CVE-2020-10251)
Summary:	VUL-1: CVE-2020-10251: GraphicsMagick,ImageMagick: out-of-bounds read vulnera...

Status:	RESOLVED WORKSFORME

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P5 - None Severity: Normal
Target Milestone:	---
Assigned To:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/254493/
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2020-03-10 11:04 UTC by Wolfgang Frisch
Modified:	2020-03-10 11:46 UTC (History)
CC List:	1 user (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
CVE-2020-10251-ImageMagick-PoC.heic (701.28 KB, application/octet-stream) 2020-03-10 11:41 UTC, Wolfgang Frisch	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Wolfgang Frisch 2020-03-10 11:04:56 UTC

CVE-2020-10251

In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the
ReadHEICImageByID function in coders\heic.c. It can be triggered via an image
with a width or height value that exceeds the actual size of the image.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-10251
https://github.com/ImageMagick/ImageMagick/issues/1859
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10251

Comment 2 Wolfgang Frisch 2020-03-10 11:41:13 UTC

Created attachment 832399 [details]
CVE-2020-10251-ImageMagick-PoC.heic

Comment 3 Wolfgang Frisch 2020-03-10 11:41:34 UTC

Not affected.