{"id":"CVE-2020-27769","aliases":["DEBIAN-CVE-2020-27769","DLA-2602-1","DLA-3357-1","EUVD-2020-20273","GHSA-5q3f-hrrv-3qfw","JLSEC-2026-867","OESA-2021-1198","SUSE-SU-2021:0153-1","SUSE-SU-2021:0156-1","SUSE-SU-2021:0199-1","SUSE-SU-2021:14598-1","UBUNTU-CVE-2020-27769","USN-4988-1","USN-7068-1","openSUSE-SU-2021:0136-1","openSUSE-SU-2021:0148-1"],"status":"published","title":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of...","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01094,"percentile":0.6575,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-01-15T15:30:02Z","modified":"2026-10-26T12:02:42Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.24+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.0+0"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.16+esm11"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.24+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u12"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u10","8:6.9.7.4+dfsg-11+deb9u11","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8","8:6.9.7.4+dfsg-11+deb9u9"],"bundled":24},{"source":"osv","ecosystem":"Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u2"}]}],"versions":["8:6.9.10.23+dfsg-2.1","8:6.9.10.23+dfsg-2.1+deb10u1"],"bundled":37},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.0+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-24.oe1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.9.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.9.1"}]}],"bundled":34},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.90.1"}]}],"bundled":35},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.154.1"}]}],"bundled":32},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.135.1"}]}],"bundled":19},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm11"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10"],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm11"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10"],"bundled":33},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp152.12.9.1"}]}],"bundled":35},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.26.1"}]}],"bundled":35}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"redhat","product":"enterprise_linux_desktop"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1894690","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27769","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5q3f-hrrv-3qfw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-27769","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20313","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20311","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20309","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210153-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179202","tags":["report"]},{"url":"https://bugzilla.suse.com/1179208","tags":["report"]},{"url":"https://bugzilla.suse.com/1179212","tags":["report"]},{"url":"https://bugzilla.suse.com/1179221","tags":["report"]},{"url":"https://bugzilla.suse.com/1179223","tags":["report"]},{"url":"https://bugzilla.suse.com/1179240","tags":["report"]},{"url":"https://bugzilla.suse.com/1179244","tags":["report"]},{"url":"https://bugzilla.suse.com/1179260","tags":["report"]},{"url":"https://bugzilla.suse.com/1179268","tags":["report"]},{"url":"https://bugzilla.suse.com/1179269","tags":["report"]},{"url":"https://bugzilla.suse.com/1179276","tags":["report"]},{"url":"https://bugzilla.suse.com/1179278","tags":["report"]},{"url":"https://bugzilla.suse.com/1179281","tags":["report"]},{"url":"https://bugzilla.suse.com/1179285","tags":["report"]},{"url":"https://bugzilla.suse.com/1179311","tags":["report"]},{"url":"https://bugzilla.suse.com/1179312","tags":["report"]},{"url":"https://bugzilla.suse.com/1179313","tags":["report"]},{"url":"https://bugzilla.suse.com/1179315","tags":["report"]},{"url":"https://bugzilla.suse.com/1179317","tags":["report"]},{"url":"https://bugzilla.suse.com/1179321","tags":["report"]},{"url":"https://bugzilla.suse.com/1179322","tags":["report"]},{"url":"https://bugzilla.suse.com/1179327","tags":["report"]},{"url":"https://bugzilla.suse.com/1179333","tags":["report"]},{"url":"https://bugzilla.suse.com/1179336","tags":["report"]},{"url":"https://bugzilla.suse.com/1179338","tags":["report"]},{"url":"https://bugzilla.suse.com/1179339","tags":["report"]},{"url":"https://bugzilla.suse.com/1179343","tags":["report"]},{"url":"https://bugzilla.suse.com/1179345","tags":["report"]},{"url":"https://bugzilla.suse.com/1179346","tags":["report"]},{"url":"https://bugzilla.suse.com/1179347","tags":["report"]},{"url":"https://bugzilla.suse.com/1179361","tags":["report"]},{"url":"https://bugzilla.suse.com/1179362","tags":["report"]},{"url":"https://bugzilla.suse.com/1179397","tags":["report"]},{"url":"https://bugzilla.suse.com/1179753","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29599","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210156-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179103","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-19667","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210199-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-202114598-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-27769","tags":["report"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/1740","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4988-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27769","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7068-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20176","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-7398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27560","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMIDOKTR355FMU6NNJAZYI3VSQVSKBVF/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HHVDAUG64ZZXILYBSYFLJC2X5Q3ZAHD/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-27769","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2021-05-14T00:00:00Z","modified":"2024-08-04T16:18:45.696Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:35:53.552996Z"}],"euvd":[{"id":"EUVD-2020-20273","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2021-05-14T00:00:00Z","modified":"2024-08-04T16:18:45Z","updated_at":"2026-11-03T03:07:11.950168Z"}],"ghsa":[{"id":"GHSA-5q3f-hrrv-3qfw","title":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of...","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2022-05-24T19:02:26Z","modified":"2023-03-12T00:30:16Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:54:19.756427Z"}],"nvd":[{"id":"CVE-2020-27769","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2021-05-14T20:15:11.057Z","modified":"2026-06-17T03:09:36.56Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:39.25999Z"}],"osv":[{"id":"CVE-2020-27769","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2021-05-14T20:15:11.057Z","modified":"2026-10-24T10:30:28.747184839Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-27769","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2021-05-14T20:15:11.057Z","modified":"2026-10-26T12:02:42.299454922Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"JLSEC-2026-867","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at `MagickCore/quantize.c`.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:47.782699312Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2021-1198","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27752)\r\n\r\nA flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.(CVE-2021-20313)\r\n\r\nA flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.(CVE-2021-20311)\r\n\r\nA flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.(CVE-2021-20312)\r\n\r\nA flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability.(CVE-2021-20309)\r\n\r\nIn ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type \u0026apos;float\u0026apos; at MagickCore/quantize.c.(CVE-2020-27769)","status":"published","published":"2021-05-30T11:04:26Z","modified":"2026-08-18T01:15:40.863574797Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2020-27769","description":"In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.","status":"published","published":"2021-05-14T20:15:00Z","modified":"2026-04-22T12:38:04.246815Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-2602-1","title":"imagemagick - security update","status":"published","published":"2021-03-22T00:00:00Z","modified":"2026-03-09T01:18:27.779446Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3357-1","title":"imagemagick - security update","status":"published","published":"2023-03-11T00:00:00Z","modified":"2026-03-09T01:17:58.616488Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2021:0136-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-22T09:21:53Z","modified":"2026-02-04T02:16:53.833293Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0148-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-24T05:22:46Z","modified":"2026-02-04T03:06:38.91155Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2021:0153-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-15T17:01:43Z","modified":"2026-02-04T03:05:59.243101Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0156-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed a division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27756: Fixed a division by zero at MagickCore/geometry.c (bsc#1179221).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27758: Fixed an outside the range of representable values of type 'unsigned long long' (bsc#1179276).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n- CVE-2020-29599: Fixed a shell command injection in -authenticate (bsc#1179753).\n","status":"published","published":"2021-01-18T10:55:00Z","modified":"2026-02-04T02:18:49.206652Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0199-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25665: Fixed a heap-based buffer overflow in WritePALMImage (bsc#1179208).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-25674: Fixed a heap-based buffer overflow in WriteOnePNGImage (bsc#1179223).\n- CVE-2020-25675: Fixed an outside the range of representable values of type 'long' and integer overflow (bsc#1179240).\n- CVE-2020-25676: Fixed an outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c (bsc#1179244).\n- CVE-2020-27750: Fixed an division by zero in MagickCore/colorspace-private.h (bsc#1179260).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27762: Fixed an outside the range of representable values of type 'unsigned char' (bsc#1179278).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27764: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179317).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27766: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179361).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27770: Fixed an unsigned offset overflowed at MagickCore/string.c (bsc#1179343).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27773: Fixed a division by zero at MagickCore/gem-private.h (bsc#1179285).\n- CVE-2020-27774: Fixed an integer overflow at MagickCore/statistic.c (bsc#1179333).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n- CVE-2020-27776: Fixed an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c (bsc#1179362).\n","status":"published","published":"2021-01-22T14:20:39Z","modified":"2025-05-02T04:30:35.076625Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:14598-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\t  \n- CVE-2020-19667: Fixed a stack buffer overflow in XPM coder could result in a crash (bsc#1179103).\n- CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel (bsc#1179202).\n- CVE-2020-25666: Fixed an outside the range of representable values of type 'int' and signed integer overflow (bsc#1179212).\n- CVE-2020-27751: Fixed an integer overflow in MagickCore/quantum-export.c (bsc#1179269).\n- CVE-2020-27752: Fixed a heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h (bsc#1179346).\n- CVE-2020-27753: Fixed memory leaks in AcquireMagickMemory function (bsc#1179397).\n- CVE-2020-27754: Fixed an outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c (bsc#1179336).\n- CVE-2020-27755: Fixed memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c (bsc#1179345).\n- CVE-2020-27757: Fixed an outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h (bsc#1179268).\n- CVE-2020-27759: Fixed an outside the range of representable values of type 'int' at MagickCore/quantize.c (bsc#1179313).\n- CVE-2020-27760: Fixed a division by zero at MagickCore/enhance.c (bsc#1179281).\n- CVE-2020-27761: Fixed an outside the range of representable values of type 'unsigned long' at coders/palm.c (bsc#1179315).\n- CVE-2020-27763: Fixed a division by zero at MagickCore/resize.c (bsc#1179312).\n- CVE-2020-27765: Fixed a division by zero at MagickCore/segment.c (bsc#1179311).\n- CVE-2020-27767: Fixed an outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n- CVE-2020-27768: Fixed an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h (bsc#1179339).\n- CVE-2020-27769: Fixed an outside the range of representable values of type 'float' at MagickCore/quantize.c (bsc#1179321).\n- CVE-2020-27771: Fixed an outside the range of representable values of type 'unsigned char' at coders/pdf.c (bsc#1179327).\n- CVE-2020-27772: Fixed an outside the range of representable values of type 'unsigned int' at coders/bmp.c (bsc#1179347).\n- CVE-2020-27775: Fixed an outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h (bsc#1179338).\n","status":"published","published":"2021-01-15T15:30:02Z","modified":"2026-02-04T04:07:00.584703Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4988-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2021-06-15T11:11:56Z","modified":"2026-04-27T18:47:21.463272201Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-7068-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain \nmalformed image files. If a user or automated system using ImageMagick\nwere tricked into processing a specially crafted file, an attacker could\nexploit this to cause a denial of service or affect the reliability of the\nsystem. The vulnerabilities included memory leaks, buffer overflows, and\nimproper handling of pixel data.\n","status":"published","published":"2024-10-15T08:18:57Z","modified":"2026-06-29T13:51:17.614286135Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}