CVE-2020-27774

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

• CWE-190
• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1898296Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1898296Exploit, Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/03/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html

Published

Dec 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27769In ImageMagick versions before 7.0.9-0, there are outside th…3.3
• CVE-2020-2777Vulnerability in the Hyperion Financial Management product o…4.2
• CVE-2020-27770Due to a missing check for 0 value of `replace_extent`, it i…5.5
• CVE-2020-27771In RestoreMSCWarning() of /coders/pdf.c there are several ar…3.3
• CVE-2020-27772A flaw was found in ImageMagick in coders/bmp.c. An attacker…3.3
• CVE-2020-27773A flaw was found in ImageMagick in MagickCore/gem-private.h.…3.3
• CVE-2020-27775A flaw was found in ImageMagick in MagickCore/quantum.h. An …3.3
• CVE-2020-27776A flaw was found in ImageMagick in MagickCore/statistic.c. A…3.3
• CVE-2020-27777A flaw was found in the way RTAS handled memory accesses in …6.7
• CVE-2020-27778A flaw was found in Poppler in the way certain PDF files wer…7.5
• CVE-2020-27779A flaw was found in grub2 in versions prior to 2.06. The cut…7.5
• CVE-2020-2778Vulnerability in the Java SE product of Oracle Java SE (comp…3.7