{"id":"CVE-2020-21679","aliases":["DEBIAN-CVE-2020-21679","EUVD-2020-14447","GHSA-5c8v-qg3w-p36f","OESA-2023-1811","OESA-2023-1817","OESA-2023-1818","OESA-2023-1819","OESA-2023-1820","SUSE-SU-2023:3739-1","SUSE-SU-2023:3792-1","SUSE-SU-2023:4634-1","UBUNTU-CVE-2020-21679"],"status":"published","title":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows...","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00428,"percentile":0.3753,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-08-22T00:00:00Z","modified":"2026-10-26T12:01:43Z","fixes":[{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.4+really1.3.34+hg16181-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.4+really1.3.34+hg16181-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.4+really1.3.34+hg16181-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"GraphicsMagick","fixed_in":["1.3.41-1.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"GraphicsMagick","fixed_in":["1.3.41-1.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"GraphicsMagick","fixed_in":["1.3.41-1.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"GraphicsMagick","fixed_in":["1.3.41-1.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"GraphicsMagick","fixed_in":["1.3.41-1.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","fixed_in":["6.8.8.1-71.198.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","fixed_in":["6.8.8.1-71.198.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","fixed_in":["6.8.8.1-71.198.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","fixed_in":["6.8.8.1-71.198.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"ImageMagick","fixed_in":["7.0.7.34-150200.10.54.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.34+hg16181-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.34+hg16181-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.34+hg16181-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.41-1.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.41-1.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.41-1.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.41-1.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.41-1.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.198.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.198.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.198.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.198.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150200.10.54.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150000.3.123.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150000.3.123.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150000.3.123.1"}]}],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1","1.3.18-1ubuntu3.1+esm2","1.3.18-1ubuntu3.1+esm3","1.3.18-1ubuntu3.1+esm4","1.3.18-1ubuntu3.1+esm5","1.3.18-1ubuntu3.1+esm6","1.3.18-1ubuntu3.1+esm7","1.3.18-1ubuntu3.1+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.1+esm1","1.3.23-1ubuntu0.2","1.3.23-1ubuntu0.3","1.3.23-1ubuntu0.4","1.3.23-1ubuntu0.5","1.3.23-1ubuntu0.6","1.3.23-1ubuntu0.6+esm1","1.3.23-1ubuntu0.6+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.26-15","1.3.26-16","1.3.26-19","1.3.27-1","1.3.27-2","1.3.27-3","1.3.28-1","1.3.28-2","1.3.28-2ubuntu0.1","1.3.28-2ubuntu0.1+esm1","1.3.28-2ubuntu0.2","1.3.28-2ubuntu0.2+esm1"]}],"products":[{"vendor":"graphicsmagick","product":"graphicsmagick"}],"references":[{"url":"https://sourceforge.net/p/graphicsmagick/bugs/619/","tags":["x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-21679","tags":["advisory"]},{"url":"https://sourceforge.net/p/graphicsmagick/bugs/619"},{"url":"https://github.com/advisories/GHSA-5c8v-qg3w-p36f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-21679","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1811","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1817","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1818","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1819","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1820","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233739-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214578","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-21679","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233792-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234634-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153866","tags":["report"]},{"url":"https://bugzilla.suse.com/1181836","tags":["report"]},{"url":"https://bugzilla.suse.com/1182325","tags":["report"]},{"url":"https://bugzilla.suse.com/1182335","tags":["report"]},{"url":"https://bugzilla.suse.com/1182336","tags":["report"]},{"url":"https://bugzilla.suse.com/1182337","tags":["report"]},{"url":"https://bugzilla.suse.com/1184624","tags":["report"]},{"url":"https://bugzilla.suse.com/1184626","tags":["report"]},{"url":"https://bugzilla.suse.com/1184627","tags":["report"]},{"url":"https://bugzilla.suse.com/1184628","tags":["report"]},{"url":"https://bugzilla.suse.com/1195563","tags":["report"]},{"url":"https://bugzilla.suse.com/1197147","tags":["report"]},{"url":"https://bugzilla.suse.com/1199350","tags":["report"]},{"url":"https://bugzilla.suse.com/1200387","tags":["report"]},{"url":"https://bugzilla.suse.com/1200388","tags":["report"]},{"url":"https://bugzilla.suse.com/1200389","tags":["report"]},{"url":"https://bugzilla.suse.com/1202250","tags":["report"]},{"url":"https://bugzilla.suse.com/1202800","tags":["report"]},{"url":"https://bugzilla.suse.com/1207982","tags":["report"]},{"url":"https://bugzilla.suse.com/1207983","tags":["report"]},{"url":"https://bugzilla.suse.com/1209141","tags":["report"]},{"url":"https://bugzilla.suse.com/1211791","tags":["report"]},{"url":"https://bugzilla.suse.com/1213624","tags":["report"]},{"url":"https://bugzilla.suse.com/1215939","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5341","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-21679","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-21679","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-21679","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-07T15:14:28.087Z","updated_at":"2026-11-02T14:35:48.854892Z"}],"euvd":[{"id":"EUVD-2020-14447","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2024-10-07T15:14:28Z","updated_at":"2026-11-03T00:27:47.285621Z"}],"ghsa":[{"id":"GHSA-5c8v-qg3w-p36f","title":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows...","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T21:30:25Z","modified":"2024-04-04T07:05:53Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:56:48.229282Z"}],"nvd":[{"id":"CVE-2020-21679","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T19:16:13.99Z","modified":"2026-06-17T03:03:51.687Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:47.910346Z"}],"osv":[{"id":"CVE-2020-21679","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T19:16:13.99Z","modified":"2026-03-14T10:19:51.985734Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:15.534837Z"},{"id":"DEBIAN-CVE-2020-21679","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T19:16:13.99Z","modified":"2026-10-26T12:01:43.788695892Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"OESA-2023-1811","title":"GraphicsMagick security update","description":"GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler\u0026apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.(CVE-2020-21679)","status":"published","published":"2023-11-10T11:06:15Z","modified":"2026-08-18T01:17:56.709626416Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1817","title":"GraphicsMagick security update","description":"GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler\u0026apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.(CVE-2020-21679)","status":"published","published":"2023-11-17T11:06:15Z","modified":"2026-08-18T01:17:56.832211078Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1818","title":"GraphicsMagick security update","description":"GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler\u0026apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.(CVE-2020-21679)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:17:56.937179081Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1819","title":"GraphicsMagick security update","description":"GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler\u0026apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.(CVE-2020-21679)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:17:57.000132365Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"OESA-2023-1820","title":"GraphicsMagick security update","description":"GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler\u0026apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP.\r\n\r\nSecurity Fix(es):\r\n\r\nBuffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.(CVE-2020-21679)","status":"published","published":"2023-11-17T11:06:16Z","modified":"2026-08-18T01:17:56.963753643Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2020-21679","description":"Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to pcx format.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-04-22T12:33:29.860865Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"SUSE-SU-2023:3739-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. (bsc#1214578)\n","status":"published","published":"2023-09-22T18:44:57Z","modified":"2026-02-04T03:17:30.588676Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3792-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. (bsc#1214578)\n","status":"published","published":"2023-09-26T16:05:08Z","modified":"2026-02-04T02:51:53.283362Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:4634-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n    \nSecurity issues:\n\n- CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)\n- CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. (bsc#1214578)\n- CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in quantum-private.h (bsc#1213624).\n- CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791).\n- CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141)\n- CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983).\n- CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982).\n- CVE-2022-32547: Fixed a load of misaligned address at MagickCore/property.c. (bsc#1200387)\n- CVE-2022-32546: Fixed an outside the range of representable values of type. (bsc#1200389)\n- CVE-2022-32545: Fixed an outside the range of representable values of type. (bsc#1200388)\n- CVE-2022-28463: Fixed buffer overflow in coders/cin.c (bsc#1199350).\n- CVE-2022-2719: Fixed a reachable assertion that could lead to denial of service via a crafted file (bsc#1202250).\n- CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h (bsc#1195563).\n- CVE-2021-3574: Fixed memory leaks with convert command (bsc#1203212).\n- CVE-2021-20313: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c (bsc#1184628)\n- CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c (bsc#1184627)\n- CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c (bsc#1184626)\n- CVE-2021-20309: Division by zero in WaveImage() of MagickCore/visual-effects. (bsc#1184624)\n- CVE-2021-20246: Division by zero in ScaleResampleFilter in MagickCore/resample.c (bsc#1182337).\n- CVE-2021-20244: Division by zero in ImplodeImage in MagickCore/visual-effects.c (bsc#1182325).\n- CVE-2021-20243: Division by zero in GetResizeFilterWeight in MagickCore/resize.c (bsc#1182336).\n- CVE-2021-20241: Division by zero in WriteJP2Image() in coders/jp2.c (bsc#1182335).\n- CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file (bsc#1202800).\n- CVE-2021-20176: Fixed an issue where processing a crafted file could lead to division by zero (bsc#1181836).\n- CVE-2019-17540: Fixed heap-based buffer overflow in ReadPSInfo in coders/ps.c. (bsc#1153866)\n\nBugfixes:\n\n- Use png_get_eXIf_1 when available (bsc#1197147).\n","status":"published","published":"2023-12-01T16:57:31Z","modified":"2026-02-04T02:42:32.321075Z","updated_at":"2026-11-02T15:53:53.865042Z"}]}}