CVE-2021-20176
ImageMagick: processing crafted file leads to division by zero
Loading…
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 6, 2021
Updated · November 22, 2025
Description
A divide-by-zero flaw was found in ImageMagick in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-369 · Divide By Zero