Servers and applications
CVE-2020-25666
There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and `count` value for a color. The patch uses casts to `ssize_t` type for these calculations, instead of `int`. This flaw could impact application reliability in the event that ImageMagick processes a crafted input file. This flaw…
- Severity
- Low 3.3
- Published
- 8 Dec 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 6.9.10-69, 7.0.9-0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick |
|