CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.

• CWE-401

• https://bugzilla.redhat.com/show_bug.cgi?id=1894229Exploit, Issue Tracking, Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1894229Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Dec 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27748A flaw was found in the xdg-email component of xdg-utils-1.1…6.5
• CVE-2020-27749A flaw was found in grub2 in versions prior to 2.06. Variabl…6.7
• CVE-2020-2775Vulnerability in the PeopleSoft Enterprise PeopleTools produ…5.3
• CVE-2020-27750A flaw was found in ImageMagick in MagickCore/colorspace-pri…5.5
• CVE-2020-27751A flaw was found in ImageMagick in MagickCore/quantum-export…3.3
• CVE-2020-27752A flaw was found in ImageMagick in MagickCore/quantum-privat…7.1
• CVE-2020-27754In IntensityCompare() of /magick/quantize.c, there are calls…3.3
• CVE-2020-27755in SetImageExtent() of /MagickCore/image.c, an incorrect ima…3.3
• CVE-2020-27756In ParseMetaGeometry() of MagickCore/geometry.c, image heigh…5.5
• CVE-2020-27757A floating point math calculation in ScaleAnyToQuantum() of …3.3
• CVE-2020-27758A flaw was found in ImageMagick in coders/txt.c. An attacker…3.3
• CVE-2020-27759In IntensityCompare() of /MagickCore/quantize.c, a double va…3.3