CVE-2021-20312CWE-190

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a…

published May 11, 2021

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02380 · 83.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2021-05-11T00:00Z
EPSS history
Timeline
  • 11 MAY 00:00Z
    A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a…
    cvelistv5