CVE-2020-27756Divide By Zero in Imagemagick

Severity
5.5MEDIUMNVD
EPSS
0.1%
top 66.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 8
Latest updateMay 24

Description

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

debiandebian/imagemagick< imagemagick 8:6.9.11.24+dfsg-1 (bookworm)
NVDimagemagick/imagemagick6.9.9-346.9.10-69+1
Debianimagemagick/imagemagick< 8:6.9.11.24+dfsg-1+3
CVEListV5imagemagick/imagemagickprior to 7.0.9-0

Patches

🔴Vulnerability Details

2
GHSA
GHSA-ghpq-hg85-4p3m: In ParseMetaGeometry() of MagickCore/geometry2022-05-24
OSV
CVE-2020-27756: In ParseMetaGeometry() of MagickCore/geometry2020-12-08

📋Vendor Advisories

3
Ubuntu
ImageMagick vulnerabilities2021-06-15
Debian
CVE-2020-27756: imagemagick - In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculat...2020
Red Hat
ImageMagick: division by zero at MagickCore/geometry.c2019-10-06

💬Community

1
Bugzilla
CVE-2020-27756 ImageMagick: division by zero at MagickCore/geometry.c2020-11-03