CVE-2021-20224CWE-190

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c

published August 25, 2022

CVSS
—
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00389 · 31.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c
    cvelistv5