A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade imagemagick6Upgrade imagemagick | Aug 22, 2024 | Mar 9, 2021 |
| Debian | — | Upgrade imagemagick | Mar 25, 2021 | Mar 9, 2021 |
| Freebsd | — | Upgrade ImageMagick7Upgrade ImageMagick7-nox11 | Nov 4, 2022 | May 13, 2021 |
| Huawei Euleros 2_0_sp3 | — | — | May 25, 2022 | Mar 9, 2021 |
| Huawei Euleros 2_0_sp5 | — | — | Apr 26, 2022 | Mar 9, 2021 |
| Huawei Euleros 2_0_sp8 | — | — | Apr 26, 2022 | Mar 9, 2021 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.12.3-11.4.33.0.1.94.0 on Solaris 11.4 | May 19, 2021 | Mar 9, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 9, 2021 |
| Suse | — | Upgrade libmagick-7_q16hdri4Upgrade libmagick-7_q16hdri5Upgrade libmagickcore-7_q16hdri10Upgrade imagemagickUpgrade imagemagick-devel-32bitUpgrade imagemagick-develUpgrade libmagickwand-7_q16hdri6Upgrade imagemagick-config-7-upstreamUpgrade libmagickcore-7_q16hdri6Upgrade libmagickcore-7_q16hdri6-32bitUpgrade imagemagick-extraUpgrade libmagick-devel-32bitUpgrade libmagickwand-6_q16-1Upgrade imagemagick-config-6-suseUpgrade libmagickcore-6_q16-1-32bitUpgrade imagemagick-docUpgrade imagemagick-config-7-suseUpgrade libmagickcore-6_q16-1Upgrade libmagick-6_q16-3Upgrade imagemagick-config-6-upstreamUpgrade perl-perlmagickUpgrade libmagick-7_q16hdri4-32bitUpgrade libmagick-develUpgrade libmagickwand-7_q16hdri6-32bitUpgrade libmagickwand-7_q16hdri10 | Feb 26, 2021 | Feb 25, 2021 |
| Ubuntu | — | Upgrade imagemagick-6-commonUpgrade imagemagickUpgrade libmagick++-6.q16-8Upgrade libmagickcore-devUpgrade imagemagick-6.q16hdriUpgrade libmagickwand-devUpgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6Upgrade libmagick++-6.q16-devUpgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extraUpgrade libmagickcore-6-arch-configUpgrade libmagick++-6.q16-7Upgrade libimage-magick-perlUpgrade perlmagickUpgrade libmagickcore-6.q16-6Upgrade libimage-magick-q16-perlUpgrade libmagickcore-6-headersUpgrade libmagickwand-6.q16-devUpgrade imagemagick-6.q16Upgrade libmagickcore-6.q16hdri-6Upgrade libmagick++-6.q16hdri-devUpgrade libmagick++-6.q16hdri-8Upgrade libmagick++-devUpgrade libmagickcore-6.q16-devUpgrade imagemagick-common | Nov 30, 2021 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub