In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the range of type `int` to be returned. The flaw could be triggered by a crafted input file under certain conditions when processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 25, 2021 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Apr 26, 2022 | Dec 3, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Dec 3, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2020 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade perl-PerlMagickUpgrade ImageMagick-docUpgrade libMagickWand-7_Q16HDRI6Upgrade libMagick++-develUpgrade libMagickCore-7_Q16HDRI6Upgrade ImageMagick-config-6-upstreamUpgrade imagemagick-devel-32bitUpgrade libMagickCore1-32bitUpgrade ImageMagick-extraUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-7-SUSEUpgrade libMagickCore1Upgrade libMagick++-7_Q16HDRI4Upgrade libmagick-devel-32bitUpgrade libMagickCore-6_Q16-1-32bitUpgrade libmagickcore-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1Upgrade libmagick-7_q16hdri4-32bitUpgrade ImageMagick-devel | Jan 16, 2021 | Dec 3, 2020 |
| Ubuntu | — | Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade imagemagickUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-3-extraUpgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-8Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3Upgrade imagemagick (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro) | Jun 16, 2021 | Dec 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub