cbcvebase.
CVE-2020-27761
published 2020-12-03

CVE-2020-27761: WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of representable type…

PriorityP411low3.3CVSS 3.1
AVLACLPRNUIRSUCNINAL
EPSS
1.07%
61.5th percentile
WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of representable type `unsigned long` undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to `ssize_t` instead to avoid this issue. Red Hat Product Security marked the Severity as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to ImageMagick 7.0.9-0.

Affected

9 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debianimagemagick< imagemagick 8:6.9.11.24+dfsg-1 (bookworm)imagemagick 8:6.9.11.24+dfsg-1 (bookworm)
imagemagickimagemagick< 6.9.10-696.9.10-69
imagemagickimagemagick
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 7.0.0-0 < 7.0.9-07.0.9-0

CVSS provenance

nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv3.3LOW
vendor_debian3.3LOW
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.