CVE Database›Document archive›CVE-2021-20242

CVE-2021-20242

ImageMagick: Division by zero in GenerateDifferentialNoise in MagickCore/gem.c

Loading…

Severity

Unknown

Red Hat Product Security

0

CVSS 3.1

Review impact separately from score.

Published · February 2, 2021

Updated · January 5, 2026

Description

[REJECTED CVE] A flaw was found in ImageMagick in MagickCore/gem.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.10-62.

Statement

This flaw was found to be a duplicate of CVE-2021-20176. Please see https://access.redhat.com/security/cve/CVE-2021-20176 for information about affected products and security errata.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 0
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:N

CWE-369 · Divide By Zero