CVE-2020-27775

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0

Description A flaw was found in ImageMagick in MagickCore/quantum.h, related to an integer overflow value. This issue allows a remote attacker to cause a denial of service using a specially crafted file. The exploitation of this flaw could trigger undefined behavior, potentially leading to an impact on application availability and other problems related to undefined behavior.

Recommendations For versions prior to 7.0.9-0, update to version 7.0.9-0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of crafted files by ImageMagick until a patch is applied. Avoid using the vulnerable MagickCore/quantum.h component in ImageMagick until the issue is resolved.