CVE-2020-27754: Integer Overflow
In ImageMagick, there are outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1754
Upstream patch: https://github.com/ImageMagick/ImageMagick6/commit/d5df600d43c8706df513a3273d09aee6f54a9233
Other sources
In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27754?
The severity of CVE-2020-27754 is medium.
How does CVE-2020-27754 affect ImageMagick?
CVE-2020-27754 affects ImageMagick versions 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.10.23+dfsg-2.1ubuntu13.3, 8:6.9.11.24+dfsg-1, and 8:6.9.7.4+dfsg-16ubuntu6.11.
What is the remedy for CVE-2020-27754 on Ubuntu?
To fix CVE-2020-27754 on Ubuntu, update ImageMagick to version 8:6.9.10.23+dfsg-2.1ubuntu11.4, 8:6.9.10.23+dfsg-2.1ubuntu13.3, 8:6.9.11.24+dfsg-1, or 8:6.9.7.4+dfsg-16ubuntu6.11.
What is the remedy for CVE-2020-27754 on Debian?
To fix CVE-2020-27754 on Debian, update ImageMagick to version 8:6.9.10.23+dfsg-2.1+deb10u5, 8:6.9.11.60+dfsg-1.3+deb11u1, or 8:6.9.11.60+dfsg-1.6.
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-27754?
The Common Weakness Enumeration (CWE) ID for CVE-2020-27754 is 190.