CVE-2020-27758

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1894236Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1894236Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

Published

Dec 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27752A flaw was found in ImageMagick in MagickCore/quantum-privat…7.1
• CVE-2020-27753There are several memory leaks in the MIFF coder in /coders/…5.5
• CVE-2020-27754In IntensityCompare() of /magick/quantize.c, there are calls…3.3
• CVE-2020-27755in SetImageExtent() of /MagickCore/image.c, an incorrect ima…3.3
• CVE-2020-27756In ParseMetaGeometry() of MagickCore/geometry.c, image heigh…5.5
• CVE-2020-27757A floating point math calculation in ScaleAnyToQuantum() of …3.3
• CVE-2020-27759In IntensityCompare() of /MagickCore/quantize.c, a double va…3.3
• CVE-2020-2776Vulnerability in the PeopleSoft Enterprise PeopleTools produ…8.6
• CVE-2020-27760In `GammaImage()` of /MagickCore/enhance.c, depending on the…5.5
• CVE-2020-27761WritePALMImage() in /coders/palm.c used size_t casts in seve…3.3
• CVE-2020-27762A flaw was found in ImageMagick in coders/hdr.c. An attacker…5.5
• CVE-2020-27763A flaw was found in ImageMagick in MagickCore/resize.c. An a…3.3