# CVE-2020-27770: imagemagick: Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString... CVE-2020-27770 is fixed in 29 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.11, released May 14, 2021. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2020-27770 - Priority: Routine - CVSS: n/a (Low) - EPSS: 0.0115 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Dec 4, 2020 ## Description Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | imagemagick Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [imagemagick 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | imagemagick Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [imagemagick 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-imagemagick-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | imagemagick-6-common Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-6-common-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | imagemagick-6-common Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [imagemagick-6-common 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-imagemagick-6-common-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | imagemagick-6.q16 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-6.q16-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | imagemagick-6.q16 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [imagemagick-6.q16 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-imagemagick-6.q16-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | imagemagick-6.q16hdri Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-6.q16hdri-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | imagemagick-6.q16hdri Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [imagemagick-6.q16hdri 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-imagemagick-6.q16hdri-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | imagemagick-common Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-imagemagick-common-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | imagemagick-common Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [imagemagick-common 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-imagemagick-common-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libimage-magick-perl Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libimage-magick-perl-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libimage-magick-perl Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libimage-magick-perl 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libimage-magick-perl-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libimage-magick-q16-perl Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libimage-magick-q16-perl-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libimage-magick-q16-perl Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libimage-magick-q16-perl 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libimage-magick-q16-perl-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libimage-magick-q16hdri-perl Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libimage-magick-q16hdri-perl-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libimage-magick-q16hdri-perl Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libimage-magick-q16hdri-perl 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libimage-magick-q16hdri-perl-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagick++-6-headers Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagick-6-headers-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagick++-6-headers Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagick++-6-headers 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagick-6-headers-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagick++-6.q16-7 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagick-6.q16-7-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagick++-6.q16-8 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagick++-6.q16-8 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagick-6.q16-8-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagick++-6.q16hdri-7 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagick-6.q16hdri-7-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagick++-6.q16hdri-8 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagick++-6.q16hdri-8 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagick-6.q16hdri-8-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickcore-6-arch-config Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6-arch-config-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickcore-6-arch-config Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickcore-6-arch-config 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickcore-6-arch-config-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickcore-6-headers Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6-headers-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickcore-6-headers Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickcore-6-headers 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickcore-6-headers-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickcore-6.q16-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16-3-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickcore-6.q16-3-extra Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16-3-extra-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickcore-6.q16-6 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickcore-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickcore-6.q16-6-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickcore-6.q16-6-extra Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickcore-6.q16-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickcore-6.q16-6-extra-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickcore-6.q16hdri-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16hdri-3-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickcore-6.q16hdri-3-extra Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickcore-6.q16hdri-3-extra-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickcore-6.q16hdri-6 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickcore-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickcore-6.q16hdri-6-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickcore-6.q16hdri-6-extra Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickcore-6.q16hdri-6-extra 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickcore-6.q16hdri-6-extra-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickwand-6-headers Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickwand-6-headers-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickwand-6-headers Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickwand-6-headers 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickwand-6-headers-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickwand-6.q16-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickwand-6.q16-3-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickwand-6.q16-6 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickwand-6.q16-6 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickwand-6.q16-6-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | libmagickwand-6.q16hdri-3 Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libmagickwand-6.q16hdri-3-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | libmagickwand-6.q16hdri-6 Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [libmagickwand-6.q16hdri-6 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libmagickwand-6.q16hdri-6-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | | Linux | perlmagick Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.11 | [perlmagick 8:6.9.7.4+dfsg-16ubuntu6.11](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-perlmagick-8-6.9.7.4-dfsg-16ubuntu6.11.md) | May 14, 2021 | | Linux | perlmagick Ubuntu 20.04 LTS (focal) | 8:6.9.10.23+dfsg-2.1ubuntu11.4 | [perlmagick 8:6.9.10.23+dfsg-2.1ubuntu11.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-perlmagick-8-6.9.10.23-dfsg-2.1ubuntu11.4.md) | May 14, 2021 | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo