CVE-2021-20245

MEDIUM

Imagemagick < 6.9.11-62 - Divide By Zero

Title source: rule

Description

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

References (4)

[Issue Tracking, Patch, Third Party Advisory] https://bugzilla.redhat.com/show_bug.cgi?id=1928943

[Issue Tracking, Patch, Third Party Advisory] https://github.com/ImageMagick/ImageMagick/issues/3176

[Mailing List, Third Party Advisory] https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html

[Mailing List] https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html

Scores

CVSS v3 5.5

EPSS 0.0023

EPSS Percentile 46.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-369

Status published

Affected Products (6)

imagemagick/imagemagick < 6.9.11-62

redhat/enterprise_linux

redhat/enterprise_linux

redhat/enterprise_linux

fedoraproject/fedora

debian/debian_linux

Timeline

Published Mar 09, 2021

Tracked Since Feb 18, 2026