CVE-2020-27756CWE-369

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined…

published December 8, 2020

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00843 · 57.5th percentile
Weakness
CWE-369 · Divide By Zero
Published
2020-12-08T00:00Z
EPSS history
Timeline
  • 08 DEC 00:00Z
    In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined…
    cvelistv5