Servers and applications
CVE-2020-27761
WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of representable type `unsigned long` undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to `ssize_t` instead to avoid this issue. Red Hat Product Security marked the Severity as Low because although it could potentially lead…
- Severity
- Low 3.3
- Published
- 3 Dec 2020
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 6.9.10-69, 7.0.9-0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick |
|