CVE-2020-25665CWE-122

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256

published December 8, 2020

CVSS
—
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01028 · 63.4th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2020-12-08T00:00Z
EPSS history
Timeline
  • 08 DEC 00:00Z
    The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256
    cvelistv5