{"id":"CVE-2020-27768","aliases":["CLSA-2024-1731432106","CLSA-2024-1731523487","CLSA-2024-1731956848","DEBIAN-CVE-2020-27768","DLA-2602-1","DLA-3357-1","EUVD-2020-20272","GHSA-gmwp-vj4h-cq95","JLSEC-2026-866","OESA-2021-1110","SUSE-SU-2021:0153-1","SUSE-SU-2021:0156-1","SUSE-SU-2021:0199-1","SUSE-SU-2021:14598-1","UBUNTU-CVE-2020-27768","USN-4988-1","USN-7068-1","openSUSE-SU-2021:0136-1","openSUSE-SU-2021:0148-1"],"status":"published","title":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at...","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01411,"percentile":0.72902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-01-15T15:30:02Z","modified":"2026-10-26T12:00:10Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.16+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.el7_9.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els15"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2.7-7.el6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"ImageMagick-c++","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2.7-7.el6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"ImageMagick-c++-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2.7-7.el6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"ImageMagick-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2.7-7.el6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"ImageMagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2.7-7.el6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"ImageMagick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.2.7-7.el6.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u12"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u10","8:6.9.7.4+dfsg-11+deb9u11","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8","8:6.9.7.4+dfsg-11+deb9u9"],"bundled":24},{"source":"osv","ecosystem":"Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u2"}]}],"versions":["8:6.9.10.23+dfsg-2.1","8:6.9.10.23+dfsg-2.1+deb10u1"],"bundled":37},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.0+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-19.oe1"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-19.oe1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.9.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.9.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10"],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10"],"bundled":33},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp152.12.9.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.26.1"}]}],"bundled":35}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894689","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27768","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gmwp-vj4h-cq95"},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1731432106.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2024-1731523487.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1731956848.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-27768","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20246","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210153-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179202","tags":["report"]},{"url":"https://bugzilla.suse.com/1179208","tags":["report"]},{"url":"https://bugzilla.suse.com/1179212","tags":["report"]},{"url":"https://bugzilla.suse.com/1179221","tags":["report"]},{"url":"https://bugzilla.suse.com/1179223","tags":["report"]},{"url":"https://bugzilla.suse.com/1179240","tags":["report"]},{"url":"https://bugzilla.suse.com/1179244","tags":["report"]},{"url":"https://bugzilla.suse.com/1179260","tags":["report"]},{"url":"https://bugzilla.suse.com/1179268","tags":["report"]},{"url":"https://bugzilla.suse.com/1179269","tags":["report"]},{"url":"https://bugzilla.suse.com/1179276","tags":["report"]},{"url":"https://bugzilla.suse.com/1179278","tags":["report"]},{"url":"https://bugzilla.suse.com/1179281","tags":["report"]},{"url":"https://bugzilla.suse.com/1179285","tags":["report"]},{"url":"https://bugzilla.suse.com/1179311","tags":["report"]},{"url":"https://bugzilla.suse.com/1179312","tags":["report"]},{"url":"https://bugzilla.suse.com/1179313","tags":["report"]},{"url":"https://bugzilla.suse.com/1179315","tags":["report"]},{"url":"https://bugzilla.suse.com/1179317","tags":["report"]},{"url":"https://bugzilla.suse.com/1179321","tags":["report"]},{"url":"https://bugzilla.suse.com/1179322","tags":["report"]},{"url":"https://bugzilla.suse.com/1179327","tags":["report"]},{"url":"https://bugzilla.suse.com/1179333","tags":["report"]},{"url":"https://bugzilla.suse.com/1179336","tags":["report"]},{"url":"https://bugzilla.suse.com/1179338","tags":["report"]},{"url":"https://bugzilla.suse.com/1179339","tags":["report"]},{"url":"https://bugzilla.suse.com/1179343","tags":["report"]},{"url":"https://bugzilla.suse.com/1179345","tags":["report"]},{"url":"https://bugzilla.suse.com/1179346","tags":["report"]},{"url":"https://bugzilla.suse.com/1179347","tags":["report"]},{"url":"https://bugzilla.suse.com/1179361","tags":["report"]},{"url":"https://bugzilla.suse.com/1179362","tags":["report"]},{"url":"https://bugzilla.suse.com/1179397","tags":["report"]},{"url":"https://bugzilla.suse.com/1179753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29599","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179103","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-19667","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210199-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114598-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-27768","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4988-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27768","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7068-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27560","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-27768","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2021-02-23T00:00:00Z","modified":"2024-08-04T16:18:45.666Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2020-20272","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2021-02-23T00:00:00Z","modified":"2024-08-04T16:18:45Z","updated_at":"2026-11-03T03:07:11.950168Z"}],"ghsa":[{"id":"GHSA-gmwp-vj4h-cq95","title":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at...","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2022-05-24T17:42:52Z","modified":"2023-03-12T00:30:16Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:54:19.756427Z"}],"nvd":[{"id":"CVE-2020-27768","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2021-02-23T04:15:13.803Z","modified":"2026-06-17T03:09:36.453Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:37.687844Z"}],"osv":[{"id":"CVE-2020-27768","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2021-02-23T04:15:13.803Z","modified":"2026-10-24T10:31:03.010062357Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-27768","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2021-02-23T04:15:13.803Z","modified":"2026-10-26T12:00:10.828239231Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-866","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at `MagickCore/quantum-private.h`. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:47.700839714Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2021-1110","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-27763)\r\n\r\nA flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27773)\r\n\r\nThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-25665)\r\n\r\nWriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-25674)\r\n\r\nA flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-27750)\r\n\r\nA divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20176)\r\n\r\nIn ImageMagick, there is an outside the range of representable values of type \u0026apos;unsigned int\u0026apos; at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27768)\r\n\r\nA flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20241)\r\n\r\nA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20243)\r\n\r\nA flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20244)\r\n\r\nA flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20246)","status":"published","published":"2021-04-07T11:04:20Z","modified":"2026-08-18T01:15:22.600929842Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2020-27768","description":"In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.","status":"published","published":"2021-02-23T04:15:00Z","modified":"2026-04-22T12:38:14.507336Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"CLSA-2024-1731432106","title":"ImageMagick: Fix of 2 CVEs","description":"- CVE-2020-27751: fix undefined behavior due to an overly large shift exponent\n  in quantum-export.c\n- CVE-2020-27768: fix NaN being outside the range of representable values issue\n  in quantum-private.h","status":"published","published":"2024-11-12T17:21:52Z","modified":"2026-06-01T00:33:06.515437799Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1731523487","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: Improper type casting in calculation in palm.c could lead\n     to undefined behavior in processing input file\n     - debian/patches/CVE-2020-27761.patch: fix color calculation issue that\n       caused incorrect output when writing PALM images\n     - CVE-2020-27761\n   * SECURITY UPDATE: Negative Quantum value handling issue in quantum-private.h\n     - debian/patches/CVE-2020-27757.patch: fix improper handling of negative\n       Quantum values\n     - CVE-2020-27757\n   * SECURITY UPDATE: Excessive shifting overflow in quantum-export.c\n     - debian/patches/CVE-2020-27751.patch: fix shift exponent being too\n        large for 64-bit type in scaling function\n     - CVE-2020-27751\n   * SECURITY UPDATE: Unsigned int type range issue at quantum-private.h\n     - debian/patches/CVE-2020-27768.patch: fix incorrect checking of\n       Quantum in quantum-private.h scaling functions\n     - CVE-2020-27768\n   * SECURITY UPDATE: Unsigned char overflow in RestoreMSCWarning()\n     - debian/patches/CVE-2020-27771.patch: fix incorrect casting of\n     GetPixelIndex causing overflow\n     - CVE-2020-27771","status":"published","published":"2024-11-13T18:44:52Z","modified":"2026-06-04T10:04:14.832456825Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2024-1731956848","title":"ImageMagick: Fix of 3 CVEs","description":"- CVE-2020-27751: fix shift exponent that is too large for 64-bit type at\n  magick/quantum-export.c\n- CVE-2020-27757: fix outside the range of representable values of type\n  'unsigned long long' bug at magick/quantum-private.h\n- CVE-2020-27768: fix outside the range of representable values of type\n  'unsigned int' at magick/quantum-private.h","status":"published","published":"2024-11-18T19:07:33Z","modified":"2026-06-01T00:33:16.25846121Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"DLA-2602-1","title":"imagemagick - security update","status":"published","published":"2021-03-22T00:00:00Z","modified":"2026-03-09T01:18:27.779446Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3357-1","title":"imagemagick - security update","status":"published","published":"2023-03-11T00:00:00Z","modified":"2026-03-09T01:17:58.616488Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2021:0136-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-22T09:21:53Z","modified":"2026-02-04T02:16:53.833293Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0148-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-24T05:22:46Z","modified":"2026-02-04T03:06:38.91155Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0153-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-15T17:01:43Z","modified":"2026-02-04T03:05:59.243101Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0156-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-18T10:55:00Z","modified":"2026-02-04T02:18:49.206652Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0199-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed an division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n","status":"published","published":"2021-01-22T14:20:39Z","modified":"2025-05-02T04:30:35.076625Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14598-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\t  \n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n","status":"published","published":"2021-01-15T15:30:02Z","modified":"2026-02-04T04:07:00.584703Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4988-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2021-06-15T11:11:56Z","modified":"2026-04-27T18:47:21.463272201Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-7068-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain \nmalformed image files. If a user or automated system using ImageMagick\nwere tricked into processing a specially crafted file, an attacker could\nexploit this to cause a denial of service or affect the reliability of the\nsystem. The vulnerabilities included memory leaks, buffer overflows, and\nimproper handling of pixel data.\n","status":"published","published":"2024-10-15T08:18:57Z","modified":"2026-06-29T13:51:17.614286135Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}