CVE-2020-27770

Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.

• CWE-190
• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1894691Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1894691Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

Published

Dec 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27765A flaw was found in ImageMagick in MagickCore/segment.c. An …3.3
• CVE-2020-27766A flaw was found in ImageMagick in MagickCore/statistic.c. A…7.8
• CVE-2020-27767A flaw was found in ImageMagick in MagickCore/quantum.h. An …3.3
• CVE-2020-27768In ImageMagick, there is an outside the range of representab…3.3
• CVE-2020-27769In ImageMagick versions before 7.0.9-0, there are outside th…3.3
• CVE-2020-2777Vulnerability in the Hyperion Financial Management product o…4.2
• CVE-2020-27771In RestoreMSCWarning() of /coders/pdf.c there are several ar…3.3
• CVE-2020-27772A flaw was found in ImageMagick in coders/bmp.c. An attacker…3.3
• CVE-2020-27773A flaw was found in ImageMagick in MagickCore/gem-private.h.…3.3
• CVE-2020-27774A flaw was found in ImageMagick in MagickCore/statistic.c. A…3.3
• CVE-2020-27775A flaw was found in ImageMagick in MagickCore/quantum.h. An …3.3
• CVE-2020-27776A flaw was found in ImageMagick in MagickCore/statistic.c. A…3.3