A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | Mar 9, 2021 |
| Debian | — | Upgrade imagemagick | Jun 4, 2021 | Mar 9, 2021 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick7-nox11 | Nov 4, 2022 | May 13, 2021 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.12.3-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 9, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2021 |
| Ubuntu | — | Upgrade libmagickwand-devUpgrade perlmagickUpgrade imagemagick-6-commonUpgrade libmagickcore-devUpgrade libmagick++-6.q16-devUpgrade libmagickcore-6.q16-6-extraUpgrade imagemagickUpgrade imagemagick-commonUpgrade imagemagick-6.q16Upgrade libimage-magick-q16-perlUpgrade libmagickcore-6.q16-devUpgrade libmagickwand-6.q16-devUpgrade libmagick++-devUpgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16-8Upgrade libmagickcore-6-arch-configUpgrade libimage-magick-perlUpgrade libmagickcore-6.q16-6Upgrade libmagickcore-6.q16hdri-6Upgrade libmagickcore-6-headersUpgrade imagemagick-6.q16hdriUpgrade libmagick++-6.q16hdri-8 | Nov 24, 2022 | Mar 9, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub