{"id":"CVE-2020-19667","aliases":["ALPINE-CVE-2020-19667","CLSA-2022-1648142109","DEBIAN-CVE-2020-19667","DLA-2523-1","DLA-3357-1","EUVD-2020-11570","GHSA-wp5r-9j75-539m","SUSE-SU-2021:0081-1","SUSE-SU-2021:0156-1","SUSE-SU-2021:0199-1","SUSE-SU-2021:14598-1","UBUNTU-CVE-2020-19667","USN-4988-1","USN-5335-1","USN-7068-1","openSUSE-SU-2021:0136-1","openSUSE-SU-2021:0148-1"],"status":"published","title":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick...","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01652,"percentile":0.76851,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-11-20T00:00:00Z","modified":"2026-11-03T06:32:24Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"imagemagick","fixed_in":["7.0.10.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick6","fixed_in":["6.9.11.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick6","fixed_in":["6.9.11.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick6","fixed_in":["6.9.11.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick6","fixed_in":["6.9.11.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick6","fixed_in":["6.9.11.9-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","fixed_in":["7.0.7.34-10.6.13"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","fixed_in":["7.0.7.34-10.6.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.16+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.10.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.11.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.11.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.11.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.11.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.11.9-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u11"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u10","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8","8:6.9.7.4+dfsg-11+deb9u9"],"bundled":11},{"source":"osv","ecosystem":"Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u2"}]}],"versions":["8:6.9.10.23+dfsg-2.1","8:6.9.10.23+dfsg-2.1+deb10u1"],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.6.13"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10"],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10"],"bundled":33},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp152.12.9.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.26.1"}]}],"bundled":35}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/1895","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-19667"},{"url":"https://github.com/advisories/GHSA-wp5r-9j75-539m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-19667","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1648142109","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-19667","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210081-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179103","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-19667","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179202","tags":["report"]},{"url":"https://bugzilla.suse.com/1179208","tags":["report"]},{"url":"https://bugzilla.suse.com/1179212","tags":["report"]},{"url":"https://bugzilla.suse.com/1179221","tags":["report"]},{"url":"https://bugzilla.suse.com/1179223","tags":["report"]},{"url":"https://bugzilla.suse.com/1179240","tags":["report"]},{"url":"https://bugzilla.suse.com/1179244","tags":["report"]},{"url":"https://bugzilla.suse.com/1179260","tags":["report"]},{"url":"https://bugzilla.suse.com/1179268","tags":["report"]},{"url":"https://bugzilla.suse.com/1179269","tags":["report"]},{"url":"https://bugzilla.suse.com/1179276","tags":["report"]},{"url":"https://bugzilla.suse.com/1179278","tags":["report"]},{"url":"https://bugzilla.suse.com/1179281","tags":["report"]},{"url":"https://bugzilla.suse.com/1179285","tags":["report"]},{"url":"https://bugzilla.suse.com/1179311","tags":["report"]},{"url":"https://bugzilla.suse.com/1179312","tags":["report"]},{"url":"https://bugzilla.suse.com/1179313","tags":["report"]},{"url":"https://bugzilla.suse.com/1179315","tags":["report"]},{"url":"https://bugzilla.suse.com/1179317","tags":["report"]},{"url":"https://bugzilla.suse.com/1179321","tags":["report"]},{"url":"https://bugzilla.suse.com/1179322","tags":["report"]},{"url":"https://bugzilla.suse.com/1179327","tags":["report"]},{"url":"https://bugzilla.suse.com/1179333","tags":["report"]},{"url":"https://bugzilla.suse.com/1179336","tags":["report"]},{"url":"https://bugzilla.suse.com/1179338","tags":["report"]},{"url":"https://bugzilla.suse.com/1179339","tags":["report"]},{"url":"https://bugzilla.suse.com/1179343","tags":["report"]},{"url":"https://bugzilla.suse.com/1179345","tags":["report"]},{"url":"https://bugzilla.suse.com/1179346","tags":["report"]},{"url":"https://bugzilla.suse.com/1179347","tags":["report"]},{"url":"https://bugzilla.suse.com/1179361","tags":["report"]},{"url":"https://bugzilla.suse.com/1179362","tags":["report"]},{"url":"https://bugzilla.suse.com/1179397","tags":["report"]},{"url":"https://bugzilla.suse.com/1179753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29599","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210199-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114598-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-19667","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4988-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5335-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-19667","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7068-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27560","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-19667","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T00:00:00Z","modified":"2024-08-04T14:15:27.876Z","updated_at":"2026-11-02T14:35:49.879248Z"}],"euvd":[{"id":"EUVD-2020-11570","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T00:00:00Z","modified":"2024-08-04T14:15:27Z","updated_at":"2026-11-03T03:07:25.299661Z"}],"ghsa":[{"id":"GHSA-wp5r-9j75-539m","title":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick...","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2022-05-24T17:34:37Z","modified":"2023-03-12T00:30:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:54:19.253359Z"}],"nvd":[{"id":"CVE-2020-19667","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T16:15:15.557Z","modified":"2026-06-17T02:59:52.72Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:25.394006Z"}],"osv":[{"id":"ALPINE-CVE-2020-19667","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T16:15:15.557Z","modified":"2026-11-03T06:32:24.529560853Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-19667","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T16:15:15.557Z","modified":"2026-10-24T10:50:37.980625846Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-19667","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T16:15:15.557Z","modified":"2026-10-26T12:00:48.633155298Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-19667","description":"Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.","status":"published","published":"2020-11-20T16:15:00Z","modified":"2026-04-22T12:34:04.944219Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"CLSA-2022-1648142109","title":"Fix CVE(s): CVE-2020-27762, CVE-2020-27770, CVE-2020-27760, CVE-2020-25665, CVE-2020-19667, CVE-2020-25674, CVE-2017-13144, CVE-2020-25676, CVE-2020-25664, CVE-2020-27753, CVE-2020-27750","description":"\n   * SECURITY UPDATE: Crash if image dimensions are too large\n     - debian/patches/CVE-2017-13144-*.patch: Fix memory leak in MPC image\n       format\n     - CVE-2017-13144\n   * SECURITY UPDATE: Stack-based buffer overflow\n     - debian/patches/CVE-2020-19667.patch: Zero-out memory before use\n     - CVE-2020-19667\n   * SECURITY UPDATE: Heap-based buffer overflow\n     - debian/patches/CVE-2020-25664.patch: Expand virtual memory allocation\n       by 256 bytes\n     - CVE-2020-25664\n   * SECURITY UPDATE: Heap-based buffer overflow\n     - debian/patches/CVE-2020-25665.patch: Expand virtual memory allocation\n       by 256 bytes\n     - CVE-2020-25665\n   * SECURITY UPDATE: Heap-based buffer overflow\n     - debian/patches/CVE-2020-25674.patch: Properly calculate upper limit\n       for color loop\n     - CVE-2020-25674\n   * SECURITY UPDATE: Signed integer overflows\n     - debian/patches/CVE-2020-25676.patch: Constrain pixel offsets\n       in magick/pixel.c\n     - CVE-2020-25676\n   * SECURITY UPDATE: Division by zero\n     - debian/patches/CVE-2020-27750.patch: Replace division by multiplication\n       in magick/colorspace-private.h\n     - CVE-2020-27750\n   * SECURITY UPDATE: Memory leaks\n     - debian/patches/CVE-2020-27753.patch: Fix memory handling\n       in coders/miff.c\n     - CVE-2020-27753\n   * SECURITY UPDATE: Division by zero\n     - debian/patches/CVE-2020-27760.patch: Fix division by zeros\n       in magick/enhance.c\n     - CVE-2020-27760\n   * SECURITY UPDATE: Outside the range of representable values\n     - debian/patches/CVE-2020-27762.patch: Adds consistency checks\n       in coders/hdr.c\n     - CVE-2020-27762\n   * SECURITY UPDATE: Unsigned int overflow\n     - debian/patches/CVE-2020-27770.patch: Guard against underflow when\n       decrement value in magick/string.c\n     - CVE-2020-27770","status":"published","published":"2022-03-24T17:15:09Z","modified":"2026-06-04T10:04:02.603667896Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2523-1","title":"imagemagick - security update","status":"published","published":"2021-01-12T00:00:00Z","modified":"2026-03-09T01:21:01.608195Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3357-1","title":"imagemagick - security update","status":"published","published":"2023-03-11T00:00:00Z","modified":"2026-03-09T01:17:58.616488Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2021:0136-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-22T09:21:53Z","modified":"2026-02-04T02:16:53.833293Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0148-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-24T05:22:46Z","modified":"2026-02-04T03:06:38.91155Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0081-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667 [bsc#1179103]: Stack buffer overflow in XPM coder could result in a crash\n","status":"published","published":"2021-01-12T12:46:24Z","modified":"2026-02-04T04:40:17.415739Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0156-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-18T10:55:00Z","modified":"2026-02-04T02:18:49.206652Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0199-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed an division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n","status":"published","published":"2021-01-22T14:20:39Z","modified":"2025-05-02T04:30:35.076625Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14598-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\t  \n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n","status":"published","published":"2021-01-15T15:30:02Z","modified":"2026-02-04T04:07:00.584703Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4988-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2021-06-15T11:11:56Z","modified":"2026-04-27T18:47:21.463272201Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-5335-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain values\nwhen processing XPM image data or large images. If a user or automated\nsystem using ImageMagick were tricked into opening a specially crafted\nimage, an attacker could exploit this to cause a denial of service or\npossibly execute code with the privileges of the user invoking the program.\n(CVE-2020-19667, CVE-2017-13144)\n\nSuhwan Song discovered that ImageMagick incorrectly handled memory\nwhen processing PNG,PALM,MIFF image data. If a user or automated system\nusing ImageMagick were tricked into opening a specially crafted image,\nan attacker could exploit this to cause a denial of service or possibly\nexecute code with the privileges of the user invoking the program.\n(CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753)\n\nSuhwan Song discovered that ImageMagick incorrectly handled certain values\nwhen processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service.\n(CVE-2020-25676, CVE-2020-27750, CVE-2020-27760, CVE-2020-27762,\nCVE-2020-27766, CVE-2020-27770)\n\nZhang Xiaohui discovered that ImageMagick incorrectly handled certain values\nwhen processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service.\n(CVE-2021-20176, CVE-2021-20241, CVE-2021-20243)\n","status":"published","published":"2022-03-18T11:18:34Z","modified":"2026-06-25T13:31:04.802653438Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-7068-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain \nmalformed image files. If a user or automated system using ImageMagick\nwere tricked into processing a specially crafted file, an attacker could\nexploit this to cause a denial of service or affect the reliability of the\nsystem. The vulnerabilities included memory leaks, buffer overflows, and\nimproper handling of pixel data.\n","status":"published","published":"2024-10-15T08:18:57Z","modified":"2026-06-29T13:51:17.614286135Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}