CVE-2021-20312

2021-05-1123:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.001 Low

EPSS

Percentile

39.4%

JSON

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.

OSVersionArchitecturePackageVersionFilename
Debian12allimagemagick< 8:6.9.11.60+dfsg-1.5imagemagick_8:6.9.11.60+dfsg-1.5_all.deb
Debian11allimagemagick<= 8:6.9.11.60+dfsg-1.3+deb11u2imagemagick_8:6.9.11.60+dfsg-1.3+deb11u2_all.deb
Debian10allimagemagick< 8:6.9.10.23+dfsg-2.1+deb10u5imagemagick_8:6.9.10.23+dfsg-2.1+deb10u5_all.deb
Debian999allimagemagick< 8:6.9.11.60+dfsg-1.5imagemagick_8:6.9.11.60+dfsg-1.5_all.deb
Debian13allimagemagick< 8:6.9.11.60+dfsg-1.5imagemagick_8:6.9.11.60+dfsg-1.5_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	imagemagick	< 8:6.9.11.60+dfsg-1.5	imagemagick_8:6.9.11.60+dfsg-1.5_all.deb
Debian	11	all	imagemagick	<= 8:6.9.11.60+dfsg-1.3+deb11u2	imagemagick_8:6.9.11.60+dfsg-1.3+deb11u2_all.deb
Debian	10	all	imagemagick	< 8:6.9.10.23+dfsg-2.1+deb10u5	imagemagick_8:6.9.10.23+dfsg-2.1+deb10u5_all.deb
Debian	999	all	imagemagick	< 8:6.9.11.60+dfsg-1.5	imagemagick_8:6.9.11.60+dfsg-1.5_all.deb
Debian	13	all	imagemagick	< 8:6.9.11.60+dfsg-1.5	imagemagick_8:6.9.11.60+dfsg-1.5_all.deb