CVE-2020-27769: Integer Overflow
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.
Other sources
In ImageMagick, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.
Reference: https://github.com/ImageMagick/ImageMagick/issues/1740
Upstream patch: https://github.com/ImageMagick/ImageMagick/commit/7b058696133c6d36e0b48a454e357482db71982e
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-27769?
CVE-2020-27769 is a vulnerability in ImageMagick versions before 7.0.9-0 that allows values outside the range of representable floats.
What is the severity of CVE-2020-27769?
The severity of CVE-2020-27769 is medium with a severity value of 3.3.
Which software versions are affected by CVE-2020-27769?
ImageMagick versions before 7.0.9-0 are affected by CVE-2020-27769.
How do I fix CVE-2020-27769?
To fix CVE-2020-27769, upgrade ImageMagick to version 7.0.9-0 or later.
Where can I find more information about CVE-2020-27769?
More information about CVE-2020-27769 can be found on MITRE's CVE website, ImageMagick GitHub repository, and Ubuntu security notices page.