CVE-2021-20245

2021-03-0900:00:00

CWE-369

redhat

www.cve.org

imagemagick

flaw

crafted file

math division

system availability

vulnerability

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

31.7%

JSON

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "ImageMagick",
    "versions": [
      {
        "version": "ImageMagick 6.9.11-62, ImageMagick 7.0.10-62",
        "status": "affected"
      }
    ]
  }
]