Every CVE Search/ Get API key

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...

3.3 LowFix available

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.88%Up 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 3.3

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
CVE-2020-27776
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
CVE-2020-27776
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2020-20280 No score

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
EUVD-2020-20280
Updated
2026-11-03
GitHub AdvisoriesGHSA-g4x4-6g36-hgrp 3.3

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file...

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
GHSA-g4x4-6g36-hgrp
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Weakness
CWE-190
Updated
2026-11-02
OSV 3.3

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
CVE-2020-27776
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2020-27776 3.3

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
DEBIAN-CVE-2020-27776
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 10 moreShow less
OSVJLSEC-2026-874 3.3

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
JLSEC-2026-874
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Updated
2026-11-02
OSVUBUNTU-CVE-2020-27776 3.3

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

Record
UBUNTU-CVE-2020-27776
CVSS 3.1
3.3 LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVCLSA-2024-1731956942 No score

Fix CVE(s): CVE-2020-25666, CVE-2020-27764, CVE-2020-27776

  • SECURITY UPDATE: Undefined behavior in the form of values outside the range of type unsigned long
    • debian/patches/CVE-2020-27764-and-CVE-2020-27776.patch: Fix outside the range of representable values of type unsigned long
    • CVE-2020-27764
    • CVE-2020-27776
  • SECURITY UPDATE: Integer overflow in magick/histogram.c
    • debian/patches/CVE-2020-25666.patch: Fix integer overflow in HistogramCompare in magick/histogram.c
    • CVE-2020-25666
Record
CLSA-2024-1731956942
Updated
2026-11-02
OSVopenSUSE-SU-2021:0136-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
  • CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
  • CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
  • CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
  • CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
  • CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
  • CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
  • CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
  • CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
  • CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
  • CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
  • CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
  • CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
  • CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
  • CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
  • CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
  • CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
  • CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
  • CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
  • CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
  • CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
  • CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
  • CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
  • CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
  • CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
  • CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
  • CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
  • CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
  • CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
  • CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
  • CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
  • CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
  • CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
  • CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
  • CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0136-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0148-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
  • CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
  • CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
  • CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
  • CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
  • CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
  • CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
  • CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
  • CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
  • CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
  • CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
  • CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
  • CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
  • CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
  • CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
  • CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
  • CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
  • CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
  • CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
  • CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
  • CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
  • CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
  • CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
  • CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
  • CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
  • CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
  • CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
  • CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
  • CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
  • CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
  • CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
  • CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
  • CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
  • CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
  • CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0148-1
Updated
2026-11-02
OSVSUSE-SU-2021:0153-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
  • CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
  • CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
  • CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
  • CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
  • CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
  • CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
  • CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
  • CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
  • CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
  • CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
  • CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
  • CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
  • CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
  • CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
  • CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
  • CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
  • CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
  • CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
  • CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
  • CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
  • CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
  • CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
  • CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
  • CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
  • CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
  • CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
  • CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
  • CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
  • CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
  • CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
  • CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
  • CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
Record
SUSE-SU-2021:0153-1
Updated
2026-11-02
OSVSUSE-SU-2021:0156-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
  • CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
  • CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
  • CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
  • CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
  • CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
  • CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
  • CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).
  • CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
  • CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
  • CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
  • CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
  • CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
  • CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).
  • CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
  • CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).
  • CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
  • CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
  • CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
  • CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
  • CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
  • CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
  • CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
  • CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
  • CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
  • CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
  • CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
  • CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
  • CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
  • CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
  • CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
  • CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
  • CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
  • CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
  • CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).
Record
SUSE-SU-2021:0156-1
Updated
2026-11-02
OSVSUSE-SU-2021:0199-1 No score

Security update for ImageMagick

This update for ImageMagick fixes the following issues:

  • CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).
  • CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).
  • CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).
  • CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).
  • CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).
  • CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).
  • CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).
  • CVE-2020-27750: Fixed an division by zero in MagickCore/colorspace-private.h (bsc#1179260).
  • CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).
  • CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).
  • CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).
  • CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).
  • CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).
  • CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).
  • CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).
  • CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).
  • CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).
  • CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).
  • CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).
  • CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).
  • CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).
  • CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).
  • CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).
  • CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).
  • CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).
  • CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).
  • CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).
  • CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).
  • CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).
  • CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).
  • CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).
  • CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).
Record
SUSE-SU-2021:0199-1
Updated
2026-11-02
OSVUSN-4988-1 No score

imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Record
USN-4988-1
Updated
2026-11-02
OSVUSN-7068-1 No score

imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into processing a specially crafted file, an attacker could exploit this to cause a denial of service or affect the reliability of the system. The vulnerabilities included memory leaks, buffer overflows, and improper handling of pixel data.

Record
USN-7068-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
imagemagick
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
imagemagick-6.q16
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
imagemagick-common
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
imagemagick-doc
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libimage-magick-perl
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libimage-magick-q16-perl
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagick++-6-headers
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagick++-6.q16-5v5
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagick++-6.q16-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagick++-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
Show 62 moreShow less
Affected packages
PackageAffectedFixed
libmagickcore-6-arch-config
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickcore-6-headers
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickcore-6.q16-2
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickcore-6.q16-2-extra
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickcore-6.q16-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickcore-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickwand-6-headers
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickwand-6.q16-2
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickwand-6.q16-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
libmagickwand-dev
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
perlmagick
TuxCare:Ubuntu:16.04
From an advisory covering 3 CVEs
 before 8:6.8.9.9-7ubuntu5.17+tuxcare.els17
8:6.8.9.9-7ubuntu5.17+tuxcare.els17
imagemagick
Debian:12
 before 8:6.9.11.24+dfsg-1
8:6.9.11.24+dfsg-1
imagemagick
Debian:13
 before 8:6.9.11.24+dfsg-1
8:6.9.11.24+dfsg-1
imagemagick
Debian:14
 before 8:6.9.11.24+dfsg-1
8:6.9.11.24+dfsg-1
imagemagick
Debian:9
From an advisory covering 24 CVEs
 before 8:6.9.7.4+dfsg-11+deb9u12, plus listed versions
8:6.9.7.4+dfsg-118:6.9.7.4+dfsg-11+deb9u18:6.9.7.4+dfsg-11+deb9u108:6.9.7.4+dfsg-11+deb9u118:6.9.7.4+dfsg-11+deb9u2
Show 7 moreShow less
8:6.9.7.4+dfsg-11+deb9u38:6.9.7.4+dfsg-11+deb9u48:6.9.7.4+dfsg-11+deb9u58:6.9.7.4+dfsg-11+deb9u68:6.9.7.4+dfsg-11+deb9u78:6.9.7.4+dfsg-11+deb9u88:6.9.7.4+dfsg-11+deb9u9
8:6.9.7.4+dfsg-11+deb9u12
imagemagick
Debian:10
From an advisory covering 37 CVEs
 before 8:6.9.10.23+dfsg-2.1+deb10u2, plus listed versions
8:6.9.10.23+dfsg-2.18:6.9.10.23+dfsg-2.1+deb10u1
8:6.9.10.23+dfsg-2.1+deb10u2
ImageMagick_jll
Julia
 before 6.9.12+0
6.9.12+0
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP2
From an advisory covering 34 CVEs
 before 7.0.7.34-10.9.1
7.0.7.34-10.9.1
ImageMagick
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 34 CVEs
 before 7.0.7.34-10.9.1
7.0.7.34-10.9.1
ImageMagick
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Manager Proxy 4.0
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Manager Server 4.0
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:Enterprise Storage 6
From an advisory covering 35 CVEs
 before 7.0.7.34-3.90.1
7.0.7.34-3.90.1
ImageMagick
SUSE:HPE Helion OpenStack 8
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:OpenStack Cloud 7
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:OpenStack Cloud 8
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:OpenStack Cloud 9
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
ImageMagick
SUSE:Enterprise Storage 5
From an advisory covering 32 CVEs
 before 6.8.8.1-71.154.1
6.8.8.1-71.154.1
imagemagick
Ubuntu:Pro:16.04:LTS
 before 8:6.8.9.9-7ubuntu5.16+esm11, plus listed versions
8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1
Show 29 moreShow less
8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm10
8:6.8.9.9-7ubuntu5.16+esm11
imagemagick
Ubuntu:18.04:LTS
 before 8:6.9.7.4+dfsg-16ubuntu6.11, plus listed versions
8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6
Show 6 moreShow less
8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.9
8:6.9.7.4+dfsg-16ubuntu6.11
imagemagick
Ubuntu:20.04:LTS
 before 8:6.9.10.23+dfsg-2.1ubuntu11.4, plus listed versions
8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu118:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.2
8:6.9.10.23+dfsg-2.1ubuntu11.4
imagemagick
Ubuntu:18.04:LTS
From an advisory covering 34 CVEs
 before 8:6.9.7.4+dfsg-16ubuntu6.11, plus listed versions
8:6.9.7.4+dfsg-16ubuntu28:6.9.7.4+dfsg-16ubuntu38:6.9.7.4+dfsg-16ubuntu48:6.9.7.4+dfsg-16ubuntu58:6.9.7.4+dfsg-16ubuntu6
Show 6 moreShow less
8:6.9.7.4+dfsg-16ubuntu6.28:6.9.7.4+dfsg-16ubuntu6.38:6.9.7.4+dfsg-16ubuntu6.48:6.9.7.4+dfsg-16ubuntu6.78:6.9.7.4+dfsg-16ubuntu6.88:6.9.7.4+dfsg-16ubuntu6.9
8:6.9.7.4+dfsg-16ubuntu6.11
imagemagick
Ubuntu:20.04:LTS
From an advisory covering 34 CVEs
 before 8:6.9.10.23+dfsg-2.1ubuntu11.4, plus listed versions
8:6.9.10.23+dfsg-2.1ubuntu38:6.9.10.23+dfsg-2.1ubuntu88:6.9.10.23+dfsg-2.1ubuntu98:6.9.10.23+dfsg-2.1ubuntu108:6.9.10.23+dfsg-2.1ubuntu118:6.9.10.23+dfsg-2.1ubuntu11.18:6.9.10.23+dfsg-2.1ubuntu11.2
8:6.9.10.23+dfsg-2.1ubuntu11.4
imagemagick
Ubuntu:Pro:14.04:LTS
From an advisory covering 33 CVEs
 before 8:6.7.7.10-6ubuntu3.13+esm11, plus listed versions
8:6.7.7.10-5ubuntu38:6.7.7.10-5ubuntu48:6.7.7.10-6ubuntu18:6.7.7.10-6ubuntu28:6.7.7.10-6ubuntu3
Show 22 moreShow less
8:6.7.7.10-6ubuntu3.18:6.7.7.10-6ubuntu3.28:6.7.7.10-6ubuntu3.38:6.7.7.10-6ubuntu3.48:6.7.7.10-6ubuntu3.58:6.7.7.10-6ubuntu3.68:6.7.7.10-6ubuntu3.78:6.7.7.10-6ubuntu3.88:6.7.7.10-6ubuntu3.98:6.7.7.10-6ubuntu3.118:6.7.7.10-6ubuntu3.128:6.7.7.10-6ubuntu3.138:6.7.7.10-6ubuntu3.13+esm18:6.7.7.10-6ubuntu3.13+esm28:6.7.7.10-6ubuntu3.13+esm38:6.7.7.10-6ubuntu3.13+esm48:6.7.7.10-6ubuntu3.13+esm58:6.7.7.10-6ubuntu3.13+esm68:6.7.7.10-6ubuntu3.13+esm78:6.7.7.10-6ubuntu3.13+esm88:6.7.7.10-6ubuntu3.13+esm98:6.7.7.10-6ubuntu3.13+esm10
8:6.7.7.10-6ubuntu3.13+esm11
imagemagick
Ubuntu:Pro:16.04:LTS
From an advisory covering 33 CVEs
 before 8:6.8.9.9-7ubuntu5.16+esm11, plus listed versions
8:6.8.9.9-5ubuntu28:6.8.9.9-68:6.8.9.9-6build18:6.8.9.9-78:6.8.9.9-7ubuntu1
Show 29 moreShow less
8:6.8.9.9-7ubuntu28:6.8.9.9-7ubuntu38:6.8.9.9-7ubuntu48:6.8.9.9-7ubuntu58:6.8.9.9-7ubuntu5.18:6.8.9.9-7ubuntu5.28:6.8.9.9-7ubuntu5.38:6.8.9.9-7ubuntu5.48:6.8.9.9-7ubuntu5.58:6.8.9.9-7ubuntu5.68:6.8.9.9-7ubuntu5.78:6.8.9.9-7ubuntu5.88:6.8.9.9-7ubuntu5.98:6.8.9.9-7ubuntu5.118:6.8.9.9-7ubuntu5.128:6.8.9.9-7ubuntu5.138:6.8.9.9-7ubuntu5.148:6.8.9.9-7ubuntu5.158:6.8.9.9-7ubuntu5.168:6.8.9.9-7ubuntu5.16+esm18:6.8.9.9-7ubuntu5.16+esm28:6.8.9.9-7ubuntu5.16+esm38:6.8.9.9-7ubuntu5.16+esm48:6.8.9.9-7ubuntu5.16+esm58:6.8.9.9-7ubuntu5.16+esm68:6.8.9.9-7ubuntu5.16+esm78:6.8.9.9-7ubuntu5.16+esm88:6.8.9.9-7ubuntu5.16+esm98:6.8.9.9-7ubuntu5.16+esm10
8:6.8.9.9-7ubuntu5.16+esm11
ImageMagick
openSUSE:Leap 15.2
From an advisory covering 35 CVEs
 before 7.0.7.34-lp152.12.9.1
7.0.7.34-lp152.12.9.1
ImageMagick
openSUSE:Leap 15.1
From an advisory covering 35 CVEs
 before 7.0.7.34-lp151.7.26.1
7.0.7.34-lp151.7.26.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-27776 is a low vulnerability (CVSS 3.3) in Imagemagick, published December 4, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.88%, the 59th percentile. Fixed in imagemagick 8:6.9.11.24+dfsg-1.

References

Show 117 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open