CVE-2021-20224: ImageMagick

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.

Affected products

• ImageMagick ImageMagick: before 6.9.11-57 (fixed in 6.9.11-57); from 7.0.0-0, before 7.0.10-57 (fixed in 7.0.10-57)

Published 2022-08-25. Last modified 2026-06-17.