Debian 10 Buster DLA-3357-1 Critical: Imagemagick Privilege Escalation

CVE-2020-19667

A stack-based buffer overflow and unconditional jump was found in
ReadXPMImage in coders/xpm.c

CVE-2020-25665

An out-of-bounds read in the PALM image coder was found in
WritePALMImage in coders/palm.c

CVE-2020-25666

An integer overflow was possible during simple math
calculations in HistogramCompare() in MagickCore/histogram.c

CVE-2020-25674

A for loop with an improper exit condition was found that can
allow an out-of-bounds READ via heap-buffer-overflow in
WriteOnePNGImage from coders/png.c

CVE-2020-25675

A undefined behavior was found in the form of integer overflow
and out-of-range values as a result of rounding calculations
performed on unconstrained pixel offsets in the CropImage()
and CropImageToTiles() routines of MagickCore/transform.c

CVE-2020-25676

A undefined behavior was found in the form of integer overflow
and out-of-range values as a result of rounding calculations