Riskcovery

CVE-2020-27756

State
Published
Severity
Not scored
Published
Dec 8, 2020
Updated
Aug 4, 2024
Reserved
Oct 27, 2020

Read the record on cve.org

Description

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
ImageMagickn/a
  • prior to 7.0.9-0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.