Logo
vulnerabilityCVE-2021-20312
Name
CVE-2021-20312
Source
NVD ( link)Debian ( link)
Description
A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
imagemagick
Exploitable

Vulnerability Ratings#


7.5
CVSSv31
7.8
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
7.1.2-23
Not Affected
buildroot
master
7.1.2-23
Not Affected
openwrt
master
7.1.2.21-r1
Not Affected
openwrt
openwrt-25.12
7.1.2.1-r1
Not Affected
yocto
master
7.1.2-25
Not Affected
yocto
scarthgap
7.1.1-47
Not Affected