CVE-2020-25666

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0

Description The issue is related to an integer overflow in the HistogramCompare() function within the MagickCore/histogram.c component of ImageMagick. This overflow can occur during simple math calculations involving rgb values and the count value for a color. The flaw could impact application reliability if ImageMagick processes a crafted input file, potentially leading to a denial of service.

Recommendations For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted input files until the update is applied.