CVE-2020-27759

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the range of type `int` to be returned. The flaw could be triggered by a crafted input file under certain conditions when processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	ImageMagick	ImageMagick 7.0.8-68

References

https://bugzilla.redhat.com/show_bug.cgi?id=1894238Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
https://bugzilla.redhat.com/show_bug.cgi?id=1894238Issue Tracking, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

Timeline

Published: Dec 3, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-27768.6Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affec CVE-2020-277605.5In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a craft CVE-2020-277613.3WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of repre CVE-2020-277625.5A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undef CVE-2020-277633.3A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigge CVE-2020-277643.3In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which ca CVE-2020-277653.3A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigg CVE-2020-277667.8A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could tri CVE-2020-277673.3A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigg CVE-2020-277683.3In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affe CVE-2020-277693.3In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.CVE-2020-27774.2Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected