CVE-2021-20241

MEDIUM

Imagemagick < 6.9.11-62 - Divide By Zero

Title source: rule

Description

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References (4)

[Issue Tracking, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=1928952

[Patch, Third Party Advisory] https://github.com/ImageMagick/ImageMagick/pull/3177

[Mailing List, Third Party Advisory] https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html

[Mailing List] https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 43.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-369

Status published

Affected Products (2)

imagemagick/imagemagick < 6.9.11-62

debian/debian_linux

Timeline

Published Mar 09, 2021

Tracked Since Feb 18, 2026