All vulnerabilities

Servers and applications

CVE-2020-27764

In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific…

Severity
Low 3.3
Published
3 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.9.10-69
Sources
NVD

Affected software

SoftwareAffected versions
ImageMagickServers and applications · cpe:a:imagemagick:imagemagick
  • Every version before 6.9.10-69

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-27764
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-27764