CVE & Exploit Intelligence Database

CVE-2021-27550 5.5 MEDIUM EPSS 0.00

Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a crafted PDF file.

CWE-369 Feb 23, 2021

CVE-2020-12371 5.5 MEDIUM EPSS 0.00

Divide by zero in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access.

CWE-369 Feb 17, 2021

CVE-2021-20176 5.5 MEDIUM EPSS 0.00

A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.

CWE-369 Feb 06, 2021

CVE-2020-11145 7.5 HIGH EPSS 0.00

Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

CWE-369 Jan 21, 2021

CVE-2020-27756 5.5 MEDIUM EPSS 0.00

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.

CWE-369 Dec 08, 2020

CVE-2020-27750 5.5 MEDIUM EPSS 0.00

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CWE-369 Dec 08, 2020

CVE-2020-27773 3.3 LOW EPSS 0.00

A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CWE-369 Dec 04, 2020

CVE-2020-27765 3.3 LOW EPSS 0.00

A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CWE-369 Dec 04, 2020

CVE-2020-27763 3.3 LOW EPSS 0.00

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CWE-369 Dec 03, 2020

CVE-2020-27760 5.5 MEDIUM EPSS 0.00

In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.

CWE-369 Dec 03, 2020

CVE-2020-25708 7.5 HIGH EPSS 0.01

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

CWE-369 Nov 27, 2020

CVE-2020-27560 3.3 LOW 1 Writeup EPSS 0.00

ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service.

CWE-369 Oct 22, 2020

CVE-2020-16161 7.5 HIGH 1 Writeup EPSS 0.01

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_ScaledData(). Parsing malicious input can result in a crash.

CWE-369 Oct 19, 2020

CVE-2020-16160 7.5 HIGH 1 Writeup EPSS 0.00

GoPro gpmf-parser 1.5 has a division-by-zero vulnerability in GPMF_Decompress(). Parsing malicious input can result in a crash.

CWE-369 Oct 19, 2020

CVE-2020-14415 3.3 LOW EPSS 0.00

oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.

CWE-369 Aug 27, 2020

CVE-2020-16310 5.5 MEDIUM EPSS 0.02

A division by zero vulnerability in dot24_print_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

CWE-369 Aug 13, 2020

CVE-2020-16299 5.5 MEDIUM EPSS 0.01

A Division by Zero vulnerability in bj10v_print_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. This is fixed in v9.51.

CWE-369 Aug 13, 2020

CVE-2020-12767 5.5 MEDIUM EPSS 0.00

exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.

CWE-369 May 09, 2020

CVE-2019-19888 6.5 MEDIUM EPSS 0.00

jfif_decode in jfif.c in ffjpeg through 2019-08-21 has a divide-by-zero error.

CWE-369 Dec 18, 2019

CVE-2019-5637 7.5 HIGH EPSS 0.01

When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 version 2304 (and prior) and TwinCAT 3.1 version 4204.0 (and prior).

CWE-369 Nov 21, 2019