The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick | Aug 22, 2024 | May 11, 2021 |
| Debian | — | Upgrade imagemagickNo solution exists | May 15, 2025 | May 11, 2021 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick7-nox11 | Nov 4, 2022 | May 13, 2021 |
| Huawei Euleros 2_0_sp2 | — | — | Sep 16, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp5 | — | — | Sep 7, 2021 | May 11, 2021 |
| Huawei Euleros 2_0_sp8 | — | — | Aug 10, 2021 | May 11, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 11, 2021 |
| Suse | — | Upgrade libMagickWand-7_Q16HDRI6Upgrade libMagickCore-7_Q16HDRI10Upgrade libmagickcore-7_q16hdri6-32bitUpgrade ImageMagick-develUpgrade perl-PerlMagickUpgrade libmagick-devel-32bitUpgrade ImageMagick-docUpgrade libMagickCore-7_Q16HDRI6Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagick++-7_Q16HDRI4Upgrade imagemagick-devel-32bitUpgrade ImageMagick-config-7-SUSEUpgrade ImageMagick-extraUpgrade libMagick++-7_Q16HDRI5Upgrade libmagick-7_q16hdri4-32bitUpgrade libMagick++-6_Q16-3Upgrade imagemagick-config-7-upstreamUpgrade ImageMagick-config-6-upstreamUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libMagickCore-6_Q16-1Upgrade libMagickWand-7_Q16HDRI10 | Apr 21, 2021 | Apr 20, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub