Logo
vulnerabilityCVE-2021-20310
Name
CVE-2021-20310
Source
NVD ( link)Debian ( link)
Description
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
imagemagick
Exploitable

Vulnerability Ratings#


7.5
CVSSv31
7.8
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.1.2-23
Not Affected
buildroot
master
7.1.2-23
Not Affected
openwrt
master
7.1.2.21-r1
Not Affected
openwrt
openwrt-25.12
7.1.2.1-r1
Not Affected
yocto
master
7.1.2-25
Not Affected
yocto
scarthgap
7.1.1-47
Not Affected