CVE-2020-27766

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.

• CWE-190
• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1894686Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1894686Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

Published

Dec 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27760In `GammaImage()` of /MagickCore/enhance.c, depending on the…5.5
• CVE-2020-27761WritePALMImage() in /coders/palm.c used size_t casts in seve…3.3
• CVE-2020-27762A flaw was found in ImageMagick in coders/hdr.c. An attacker…5.5
• CVE-2020-27763A flaw was found in ImageMagick in MagickCore/resize.c. An a…3.3
• CVE-2020-27764In /MagickCore/statistic.c, there are several areas in Apply…3.3
• CVE-2020-27765A flaw was found in ImageMagick in MagickCore/segment.c. An …3.3
• CVE-2020-27767A flaw was found in ImageMagick in MagickCore/quantum.h. An …3.3
• CVE-2020-27768In ImageMagick, there is an outside the range of representab…3.3
• CVE-2020-27769In ImageMagick versions before 7.0.9-0, there are outside th…3.3
• CVE-2020-2777Vulnerability in the Hyperion Financial Management product o…4.2
• CVE-2020-27770Due to a missing check for 0 value of `replace_extent`, it i…5.5
• CVE-2020-27771In RestoreMSCWarning() of /coders/pdf.c there are several ar…3.3