← All advisories

High severity7.1NVD Advisory· Published Jun 7, 2020· Updated Jun 17, 2026

CVE-2020-13902

CVE-2020-13902

Description

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.

Affected products

3

ImageMagick/Imagemagick2 versions
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*range: >=7.0.9-27,<=7.0.10-17
- (no CPE)range: 7.0.9-27 through 7.0.10-17
ImageMagick/ImageMagickdescription

Patches

Vulnerability mechanics

References

1

bugs.chromium.org/p/oss-fuzz/issues/detailnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.