CVE-2020-27756

2020-12-0822:15:18

Google

osv.dev

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.7%

JSON

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function PerceptibleReciprocal() in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.

CPENameOperatorVersion
imagemagickeq6.9.10-10
imagemagickeq7.0.7-11
imagemagickeq7.0.8-17
imagemagickeq7.0.5-1
imagemagickeq7.0.6-6
imagemagickeq7.0.8-60
imagemagickeq6.9.10-2
imagemagickeq6.9.10-61
imagemagickeq7.0.4-1
imagemagickeq7.0.8-22

Name	Operator	Version
imagemagick	eq	6.9.10-10
imagemagick	eq	7.0.7-11
imagemagick	eq	7.0.8-17
imagemagick	eq	7.0.5-1
imagemagick	eq	7.0.6-6
imagemagick	eq	7.0.8-60
imagemagick	eq	6.9.10-2
imagemagick	eq	6.9.10-61
imagemagick	eq	7.0.4-1
imagemagick	eq	7.0.8-22