{"id":"CVE-2020-25664","aliases":["CLSA-2022-1648142109","DEBIAN-CVE-2020-25664","EUVD-2020-18326","GHSA-c5hg-hx4v-7q6w","JLSEC-2026-841","OESA-2021-1050","SUSE-SU-2021:0153-1","SUSE-SU-2021:0156-1","SUSE-SU-2021:0199-1","SUSE-SU-2021:14598-1","UBUNTU-CVE-2020-25664","USN-5335-1","USN-7068-1","openSUSE-SU-2021:0136-1","openSUSE-SU-2021:0148-1"],"status":"published","title":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory(...","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00719,"percentile":0.54331,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2020-12-08T20:57:44Z","modified":"2026-10-26T12:02:40Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["6.9.12+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.16+esm2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els2"}]}],"bundled":11},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.9.12+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-11.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-11.oe1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.9.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.9.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9","8:6.9.7.4+dfsg-16ubuntu6.11","8:6.9.7.4+dfsg-16ubuntu6.12","8:6.9.7.4+dfsg-16ubuntu6.13","8:6.9.7.4+dfsg-16ubuntu6.14","8:6.9.7.4+dfsg-16ubuntu6.15","8:6.9.7.4+dfsg-16ubuntu6.15+esm1","8:6.9.7.4+dfsg-16ubuntu6.15+esm2","8:6.9.7.4+dfsg-16ubuntu6.15+esm3","8:6.9.7.4+dfsg-16ubuntu6.15+esm4","8:6.9.7.4+dfsg-16ubuntu6.15+esm5","8:6.9.7.4+dfsg-16ubuntu6.15+esm6","8:6.9.7.4+dfsg-16ubuntu6.15+esm7","8:6.9.7.4+dfsg-16ubuntu6.15+esm8","8:6.9.7.4+dfsg-16ubuntu6.15+esm9","8:6.9.7.4+dfsg-16ubuntu6.15+esm10","8:6.9.7.4+dfsg-16ubuntu6.15+esm11","8:6.9.7.4+dfsg-16ubuntu6.15+esm12","8:6.9.7.4+dfsg-16ubuntu6.15+esm13","8:6.9.7.4+dfsg-16ubuntu6.15+esm14","8:6.9.7.4+dfsg-16ubuntu6.15+esm15","8:6.9.7.4+dfsg-16ubuntu6.15+esm16","8:6.9.7.4+dfsg-16ubuntu6.15+esm17","8:6.9.7.4+dfsg-16ubuntu6.15+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2","8:6.9.10.23+dfsg-2.1ubuntu11.4","8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.5","8:6.9.10.23+dfsg-2.1ubuntu11.6","8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.7","8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.10","8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3build1","8:6.9.11.60+dfsg-1.3build2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.11.60+dfsg-1.6ubuntu1","8:6.9.12.98+dfsg1-5","8:6.9.12.98+dfsg1-5.2build1","8:6.9.12.98+dfsg1-5.2build2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.43+dfsg1-1ubuntu1","8:7.1.1.43+dfsg1-1ubuntu2","8:7.1.2.3+dfsg1-1","8:7.1.2.3+dfsg1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.2.18+dfsg1-1","8:7.1.2.25+dfsg1-2","8:7.1.2.27+dfsg1-1","8:7.1.2.31+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.2.3+dfsg1-1","8:7.1.2.8+dfsg1-1","8:7.1.2.12+dfsg1-1","8:7.1.2.13+dfsg1-1","8:7.1.2.15+dfsg1-1","8:7.1.2.16+dfsg1-1","8:7.1.2.18+dfsg1-1","8:7.1.2.18+dfsg1-1ubuntu0.1~esm1","8:7.1.2.18+dfsg1-1ubuntu0.1~esm2","8:7.1.2.18+dfsg1-1ubuntu0.1~esm3","8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10"],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10"],"bundled":33},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp152.12.9.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.26.1"}]}],"bundled":35}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1891605","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z3J6D7POCQYQKNVRDYLTTPM5SQC3WVTR/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25664","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z3J6D7POCQYQKNVRDYLTTPM5SQC3WVTR/"},{"url":"https://github.com/advisories/GHSA-c5hg-hx4v-7q6w"},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1648142109","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-25664","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27754","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210153-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179202","tags":["report"]},{"url":"https://bugzilla.suse.com/1179208","tags":["report"]},{"url":"https://bugzilla.suse.com/1179212","tags":["report"]},{"url":"https://bugzilla.suse.com/1179221","tags":["report"]},{"url":"https://bugzilla.suse.com/1179223","tags":["report"]},{"url":"https://bugzilla.suse.com/1179240","tags":["report"]},{"url":"https://bugzilla.suse.com/1179244","tags":["report"]},{"url":"https://bugzilla.suse.com/1179260","tags":["report"]},{"url":"https://bugzilla.suse.com/1179268","tags":["report"]},{"url":"https://bugzilla.suse.com/1179269","tags":["report"]},{"url":"https://bugzilla.suse.com/1179276","tags":["report"]},{"url":"https://bugzilla.suse.com/1179278","tags":["report"]},{"url":"https://bugzilla.suse.com/1179281","tags":["report"]},{"url":"https://bugzilla.suse.com/1179285","tags":["report"]},{"url":"https://bugzilla.suse.com/1179311","tags":["report"]},{"url":"https://bugzilla.suse.com/1179312","tags":["report"]},{"url":"https://bugzilla.suse.com/1179313","tags":["report"]},{"url":"https://bugzilla.suse.com/1179315","tags":["report"]},{"url":"https://bugzilla.suse.com/1179317","tags":["report"]},{"url":"https://bugzilla.suse.com/1179321","tags":["report"]},{"url":"https://bugzilla.suse.com/1179322","tags":["report"]},{"url":"https://bugzilla.suse.com/1179327","tags":["report"]},{"url":"https://bugzilla.suse.com/1179333","tags":["report"]},{"url":"https://bugzilla.suse.com/1179336","tags":["report"]},{"url":"https://bugzilla.suse.com/1179338","tags":["report"]},{"url":"https://bugzilla.suse.com/1179339","tags":["report"]},{"url":"https://bugzilla.suse.com/1179343","tags":["report"]},{"url":"https://bugzilla.suse.com/1179345","tags":["report"]},{"url":"https://bugzilla.suse.com/1179346","tags":["report"]},{"url":"https://bugzilla.suse.com/1179347","tags":["report"]},{"url":"https://bugzilla.suse.com/1179361","tags":["report"]},{"url":"https://bugzilla.suse.com/1179362","tags":["report"]},{"url":"https://bugzilla.suse.com/1179397","tags":["report"]},{"url":"https://bugzilla.suse.com/1179753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29599","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179103","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-19667","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210199-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114598-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-25664","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5335-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25664","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7068-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-13144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27560","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27776","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-25664","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2020-12-08T20:57:44Z","modified":"2024-08-04T15:40:36.922Z","cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:48.52216Z"}],"euvd":[{"id":"EUVD-2020-18326","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2020-12-08T20:57:44Z","modified":"2024-08-04T15:40:36Z","updated_at":"2026-11-03T03:07:17.317062Z"}],"ghsa":[{"id":"GHSA-c5hg-hx4v-7q6w","title":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory(...","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2022-05-24T17:35:33Z","modified":"2023-01-29T05:04:55Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:40.253766Z"}],"nvd":[{"id":"CVE-2020-25664","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2020-12-08T21:15:12.497Z","modified":"2026-06-17T03:07:05.16Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:06:27.10541Z"}],"osv":[{"id":"CVE-2020-25664","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2020-12-08T21:15:12.497Z","modified":"2026-10-24T10:30:44.172156112Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:15.879068Z"},{"id":"DEBIAN-CVE-2020-25664","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2020-12-08T21:15:12.497Z","modified":"2026-10-26T12:02:40.490432843Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-841","description":"In WriteOnePNGImage() of the PNG coder at `coders/png.c`, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from `MagickCore/quantum-private.h` is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:44.634624152Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:P","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2021-1050","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nIn IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.(CVE-2020-27754)\r\n\r\nIn WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.(CVE-2020-25664)","status":"published","published":"2021-03-05T11:04:17Z","modified":"2026-08-18T01:15:07.61889763Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2020-25664","description":"In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This flaw affects ImageMagick versions prior to 6.9.10-68 and 7.0.8-68.","status":"published","published":"2020-12-08T21:15:00Z","modified":"2026-10-17T12:55:52.151187938Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.905183Z"},{"id":"CLSA-2022-1648142109","title":"Fix CVE(s): CVE-2020-27762, CVE-2020-27770, CVE-2020-27760, CVE-2020-25665, CVE-2020-19667, CVE-2020-25674, CVE-2017-13144, CVE-2020-25676, CVE-2020-25664, CVE-2020-27753, CVE-2020-27750","description":"\n   * SECURITY UPDATE: Crash if image dimensions are too large\n     - debian/patches/CVE-2017-13144-*.patch: Fix memory leak in MPC image\n       format\n     - CVE-2017-13144\n   * SECURITY UPDATE: Stack-based buffer overflow\n     - debian/patches/CVE-2020-19667.patch: Zero-out memory before use\n     - CVE-2020-19667\n   * SECURITY UPDATE: Heap-based buffer overflow\n     - debian/patches/CVE-2020-25664.patch: Expand virtual memory allocation\n       by 256 bytes\n     - CVE-2020-25664\n   * SECURITY UPDATE: Heap-based buffer overflow\n     - debian/patches/CVE-2020-25665.patch: Expand virtual memory allocation\n       by 256 bytes\n     - CVE-2020-25665\n   * SECURITY UPDATE: Heap-based buffer overflow\n     - debian/patches/CVE-2020-25674.patch: Properly calculate upper limit\n       for color loop\n     - CVE-2020-25674\n   * SECURITY UPDATE: Signed integer overflows\n     - debian/patches/CVE-2020-25676.patch: Constrain pixel offsets\n       in magick/pixel.c\n     - CVE-2020-25676\n   * SECURITY UPDATE: Division by zero\n     - debian/patches/CVE-2020-27750.patch: Replace division by multiplication\n       in magick/colorspace-private.h\n     - CVE-2020-27750\n   * SECURITY UPDATE: Memory leaks\n     - debian/patches/CVE-2020-27753.patch: Fix memory handling\n       in coders/miff.c\n     - CVE-2020-27753\n   * SECURITY UPDATE: Division by zero\n     - debian/patches/CVE-2020-27760.patch: Fix division by zeros\n       in magick/enhance.c\n     - CVE-2020-27760\n   * SECURITY UPDATE: Outside the range of representable values\n     - debian/patches/CVE-2020-27762.patch: Adds consistency checks\n       in coders/hdr.c\n     - CVE-2020-27762\n   * SECURITY UPDATE: Unsigned int overflow\n     - debian/patches/CVE-2020-27770.patch: Guard against underflow when\n       decrement value in magick/string.c\n     - CVE-2020-27770","status":"published","published":"2022-03-24T17:15:09Z","modified":"2026-06-04T10:04:02.603667896Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"openSUSE-SU-2021:0136-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-22T09:21:53Z","modified":"2026-02-04T02:16:53.833293Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0148-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-24T05:22:46Z","modified":"2026-02-04T03:06:38.91155Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0153-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-15T17:01:43Z","modified":"2026-02-04T03:05:59.243101Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0156-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-18T10:55:00Z","modified":"2026-02-04T02:18:49.206652Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0199-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed an division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n","status":"published","published":"2021-01-22T14:20:39Z","modified":"2025-05-02T04:30:35.076625Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14598-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\t  \n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n","status":"published","published":"2021-01-15T15:30:02Z","modified":"2026-02-04T04:07:00.584703Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-5335-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain values\nwhen processing XPM image data or large images. If a user or automated\nsystem using ImageMagick were tricked into opening a specially crafted\nimage, an attacker could exploit this to cause a denial of service or\npossibly execute code with the privileges of the user invoking the program.\n(CVE-2020-19667, CVE-2017-13144)\n\nSuhwan Song discovered that ImageMagick incorrectly handled memory\nwhen processing PNG,PALM,MIFF image data. If a user or automated system\nusing ImageMagick were tricked into opening a specially crafted image,\nan attacker could exploit this to cause a denial of service or possibly\nexecute code with the privileges of the user invoking the program.\n(CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753)\n\nSuhwan Song discovered that ImageMagick incorrectly handled certain values\nwhen processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service.\n(CVE-2020-25676, CVE-2020-27750, CVE-2020-27760, CVE-2020-27762,\nCVE-2020-27766, CVE-2020-27770)\n\nZhang Xiaohui discovered that ImageMagick incorrectly handled certain values\nwhen processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service.\n(CVE-2021-20176, CVE-2021-20241, CVE-2021-20243)\n","status":"published","published":"2022-03-18T11:18:34Z","modified":"2026-06-25T13:31:04.802653438Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-7068-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain \nmalformed image files. If a user or automated system using ImageMagick\nwere tricked into processing a specially crafted file, an attacker could\nexploit this to cause a denial of service or affect the reliability of the\nsystem. The vulnerabilities included memory leaks, buffer overflows, and\nimproper handling of pixel data.\n","status":"published","published":"2024-10-15T08:18:57Z","modified":"2026-06-29T13:51:17.614286135Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}