CVE-2020-27774: Integer Overflow or Wraparound

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type ssizet. This would most likely lead to an impact to application availability, but...

CVE-2020-27776: Integer Overflow or Wraparound

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

CVE-2020-27766: Integer Overflow or Wraparound

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

CVE-2020-27776

CVE-2020-27776 affects ImageMagick’s MagickCore/statistic.c. A crafted image can trigger undefined behavior by producing values outside the range of an unsigned long, primarily impacting availability. Affected: ImageMagick versions prior to 7.0.9-0. Impact: potential denial of service through und...

CVE-2019-13307: Out-of-bounds Write

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows...

CVE-2019-13300: Out-of-bounds Write

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns...