CVE-2021-20309CWE-369

A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger…

published May 11, 2021

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02315 · 83.3th percentile
Weakness
CWE-369 · Divide By Zero
Published
2021-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger…
    cvelistv5