CVE Vulnerabilities

CVE-2021-20246

Divide By Zero

Published: Mar 09, 2021 | Modified: May 22, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Imagemagick Imagemagick * *
Imagemagick Imagemagick 7.0.0 *

References