Published: 09/03/2021 Updated: 22/05/2023

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions before 7.0.10-62.

Vulnerable Product	Search on Vulmon	Subscribe to Product
imagemagick imagemagick
redhat enterprise linux 7.0
redhat enterprise linux 6.0
redhat enterprise linux 8.0
fedoraproject fedora 33
debian debian linux 9.0

Debian Bug report logs - #1013282 imagemagick: CVE-2022-28463 CVE-2021-20241 CVE-2021-20243 CVE-2021-20244 CVE-2021-20245 CVE-2021-20246 CVE-2021-20309 CVE-2021-20312 CVE-2021-20313 CVE-2021-4219 CVE-2022-1114 CVE-2022-1115 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@lists ...

Several security issues were fixed in ImageMagick ...

A flaw was found in ImageMagick in coders/webpc An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior This flaw aff ...

https://bugzilla.redhat.com/show_bug.cgi?id=1928943 https://github.com/ImageMagick/ImageMagick/issues/3176 https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1013282 https://ubuntu.com/security/notices/USN-5736-1 https://nvd.nist.gov https://security.archlinux.org/CVE-2021-20245

CVE-2021-20245

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect