CVE-2021-20310CWE-369

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined…

published May 11, 2021

CVSS
—
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01287 · 69.9th percentile
Weakness
CWE-369 · Divide By Zero
Published
2021-05-11T22:30Z
EPSS history
Timeline
  • 11 MAY 22:30Z
    A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined…
    cvelistv5