In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-imagemagick | Jan 14, 2021 | Dec 3, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-imagemagickhuawei-euleros-2_0_sp3-upgrade-imagemagick-c++huawei-euleros-2_0_sp3-upgrade-imagemagick-libshuawei-euleros-2_0_sp3-upgrade-imagemagick-perl | May 25, 2022 | Dec 3, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-imagemagickhuawei-euleros-2_0_sp5-upgrade-imagemagick-c++huawei-euleros-2_0_sp5-upgrade-imagemagick-libshuawei-euleros-2_0_sp5-upgrade-imagemagick-perl | Apr 26, 2022 | Dec 3, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-imagemagickhuawei-euleros-2_0_sp8-upgrade-imagemagick-c++huawei-euleros-2_0_sp8-upgrade-imagemagick-libshuawei-euleros-2_0_sp8-upgrade-imagemagick-perl | Apr 26, 2022 | Dec 3, 2020 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Dec 3, 2020 |
| Suse | — | suse-upgrade-imagemagicksuse-upgrade-imagemagick-config-6-susesuse-upgrade-imagemagick-config-6-upstreamsuse-upgrade-imagemagick-config-7-susesuse-upgrade-imagemagick-config-7-upstreamsuse-upgrade-imagemagick-develsuse-upgrade-imagemagick-devel-32bitsuse-upgrade-imagemagick-docsuse-upgrade-imagemagick-extrasuse-upgrade-libmagick-6_q16-3suse-upgrade-libmagick-7_q16hdri4suse-upgrade-libmagick-7_q16hdri4-32bitsuse-upgrade-libmagick-develsuse-upgrade-libmagick-devel-32bitsuse-upgrade-libmagickcore-6_q16-1suse-upgrade-libmagickcore-6_q16-1-32bitsuse-upgrade-libmagickcore-7_q16hdri6suse-upgrade-libmagickcore-7_q16hdri6-32bitsuse-upgrade-libmagickcore1suse-upgrade-libmagickcore1-32bitsuse-upgrade-libmagickwand-6_q16-1suse-upgrade-libmagickwand-7_q16hdri6suse-upgrade-libmagickwand-7_q16hdri6-32bitsuse-upgrade-perl-perlmagick | Jan 16, 2021 | Dec 3, 2020 |
| Ubuntu | ubuntu-pro-upgrade-imagemagickubuntu-pro-upgrade-imagemagick-6-q16ubuntu-pro-upgrade-imagemagick-commonubuntu-pro-upgrade-libimage-magick-perlubuntu-pro-upgrade-libimage-magick-q16-perlubuntu-pro-upgrade-libmagick-5ubuntu-pro-upgrade-libmagick-6-q16-5v5ubuntu-pro-upgrade-libmagick-6-q16-devubuntu-pro-upgrade-libmagick-devubuntu-pro-upgrade-libmagickcore-6-arch-configubuntu-pro-upgrade-libmagickcore-6-headersubuntu-pro-upgrade-libmagickcore-6-q16-2ubuntu-pro-upgrade-libmagickcore-6-q16-2-extraubuntu-pro-upgrade-libmagickcore-6-q16-devubuntu-pro-upgrade-libmagickcore-devubuntu-pro-upgrade-libmagickcore5ubuntu-pro-upgrade-libmagickcore5-extraubuntu-pro-upgrade-libmagickwand-6-q16-2ubuntu-pro-upgrade-libmagickwand-6-q16-devubuntu-pro-upgrade-libmagickwand-devubuntu-pro-upgrade-libmagickwand5ubuntu-pro-upgrade-perlmagickubuntu-upgrade-imagemagickubuntu-upgrade-imagemagick-6-q16ubuntu-upgrade-libmagick-6-q16-7ubuntu-upgrade-libmagick-6-q16-8ubuntu-upgrade-libmagickcore-6-q16-3ubuntu-upgrade-libmagickcore-6-q16-3-extraubuntu-upgrade-libmagickcore-6-q16-6ubuntu-upgrade-libmagickcore-6-q16-6-extra | Jun 16, 2021 | Dec 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub