CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.

• CWE-190
• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1894680Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1894680Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

Published

Dec 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27757A floating point math calculation in ScaleAnyToQuantum() of …3.3
• CVE-2020-27758A flaw was found in ImageMagick in coders/txt.c. An attacker…3.3
• CVE-2020-27759In IntensityCompare() of /MagickCore/quantize.c, a double va…3.3
• CVE-2020-2776Vulnerability in the PeopleSoft Enterprise PeopleTools produ…8.6
• CVE-2020-27760In `GammaImage()` of /MagickCore/enhance.c, depending on the…5.5
• CVE-2020-27761WritePALMImage() in /coders/palm.c used size_t casts in seve…3.3
• CVE-2020-27763A flaw was found in ImageMagick in MagickCore/resize.c. An a…3.3
• CVE-2020-27764In /MagickCore/statistic.c, there are several areas in Apply…3.3
• CVE-2020-27765A flaw was found in ImageMagick in MagickCore/segment.c. An …3.3
• CVE-2020-27766A flaw was found in ImageMagick in MagickCore/statistic.c. A…7.8
• CVE-2020-27767A flaw was found in ImageMagick in MagickCore/quantum.h. An …3.3
• CVE-2020-27768In ImageMagick, there is an outside the range of representab…3.3