CVE-2020-27764: Integer Overflow
In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a sizet cast should have been a ssizet cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69.
Other sources
In ImageMagick, there is an outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1735
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27764?
The severity of CVE-2020-27764 is medium with a severity value of 3.3.
What software is affected by CVE-2020-27764?
The affected software is ImageMagick.
Which versions of Ubuntu are affected by CVE-2020-27764?
Ubuntu versions 18.04 (Bionic), 20.04 (Focal), and 20.10 (Groovy) are affected by CVE-2020-27764.
How can I fix CVE-2020-27764 on Ubuntu?
To fix CVE-2020-27764 on Ubuntu, update ImageMagick to version 8:6.9.7.4+dfsg-16ubuntu6.11 for Bionic, 8:6.9.10.23+dfsg-2.1ubuntu11.4 for Focal, or 8:6.9.10.23+dfsg-2.1ubuntu13.3 for Groovy.
Where can I find more information about CVE-2020-27764?
You can find more information about CVE-2020-27764 on the official CVE-Mitre website, Ubuntu Security Notices, and NVD.