{"id":"CVE-2021-20176","aliases":["ALPINE-CVE-2021-20176","CLSA-2021-1635459194","DEBIAN-CVE-2021-20176","DLA-2602-1","DLA-3429-1","EUVD-2021-7633","GHSA-rjh9-hq94-crmg","JLSEC-2026-877","OESA-2021-1110","SUSE-SU-2021:0528-1","SUSE-SU-2021:3996-1","SUSE-SU-2023:4634-1","UBUNTU-CVE-2021-20176","USN-4988-1","USN-5335-1","USN-7164-1","openSUSE-SU-2021:1583-1","openSUSE-SU-2021:3996-1"],"status":"published","title":"A flaw was found in ImageMagick in MagickCore/gem.c. An attacker who submits a crafted file that...","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00936,"percentile":0.61118,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2021-02-05T00:00:00Z","modified":"2026-11-03T06:32:46Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"imagemagick","fixed_in":["7.0.10.57-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.57+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.11.57+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.11.57+dfsg-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["6.9.12+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","fixed_in":["7.0.7.34-10.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"ImageMagick","fixed_in":["7.0.7.34-10.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","fixed_in":["7.0.7.34-10.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"ImageMagick","fixed_in":["7.0.7.34-10.18.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.13+esm12"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.16+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-16ubuntu6.11"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","fixed_in":["8:6.9.10.23+dfsg-2.1ubuntu11.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"ImageMagick","fixed_in":["7.0.7.34-lp152.12.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"ImageMagick","fixed_in":["7.0.7.34-10.18.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0-0"},{"fixed":"7.0.10.57-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17"}]}],"bundled":10},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.57+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.57+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.57+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u12"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u10","8:6.9.7.4+dfsg-11+deb9u11","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8","8:6.9.7.4+dfsg-11+deb9u9"],"bundled":24},{"source":"osv","ecosystem":"Debian:10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1+deb10u5"}]}],"versions":["8:6.9.10.23+dfsg-2.1","8:6.9.10.23+dfsg-2.1+deb10u1","8:6.9.10.23+dfsg-2.1+deb10u2","8:6.9.10.23+dfsg-2.1+deb10u3","8:6.9.10.23+dfsg-2.1+deb10u4"],"bundled":14},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.9.12+0"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-19.oe1"}]}],"bundled":11},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.67-19.oe1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.159.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.159.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.159.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.159.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150000.3.123.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150000.3.123.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-150000.3.123.1"}]}],"bundled":24},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm12"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.11"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.4"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2"],"bundled":34},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1"],"bundled":15},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.13+esm12"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp152.12.18.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-10.18.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1916610","tags":["x_transferred","Issue Tracking","report","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20176","tags":["advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/3077"},{"url":"https://github.com/advisories/GHSA-rjh9-hq94-crmg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-20176","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1635459194","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20176","tags":["advisory"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27773","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25674","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27768","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20241","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20243","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20246","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210528-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179322","tags":["report"]},{"url":"https://bugzilla.suse.com/1181836","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20176","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213996-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234634-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153866","tags":["report"]},{"url":"https://bugzilla.suse.com/1182325","tags":["report"]},{"url":"https://bugzilla.suse.com/1182335","tags":["report"]},{"url":"https://bugzilla.suse.com/1182336","tags":["report"]},{"url":"https://bugzilla.suse.com/1182337","tags":["report"]},{"url":"https://bugzilla.suse.com/1184624","tags":["report"]},{"url":"https://bugzilla.suse.com/1184626","tags":["report"]},{"url":"https://bugzilla.suse.com/1184627","tags":["report"]},{"url":"https://bugzilla.suse.com/1184628","tags":["report"]},{"url":"https://bugzilla.suse.com/1195563","tags":["report"]},{"url":"https://bugzilla.suse.com/1197147","tags":["report"]},{"url":"https://bugzilla.suse.com/1199350","tags":["report"]},{"url":"https://bugzilla.suse.com/1200387","tags":["report"]},{"url":"https://bugzilla.suse.com/1200388","tags":["report"]},{"url":"https://bugzilla.suse.com/1200389","tags":["report"]},{"url":"https://bugzilla.suse.com/1202250","tags":["report"]},{"url":"https://bugzilla.suse.com/1202800","tags":["report"]},{"url":"https://bugzilla.suse.com/1207982","tags":["report"]},{"url":"https://bugzilla.suse.com/1207983","tags":["report"]},{"url":"https://bugzilla.suse.com/1209141","tags":["report"]},{"url":"https://bugzilla.suse.com/1211791","tags":["report"]},{"url":"https://bugzilla.suse.com/1213624","tags":["report"]},{"url":"https://bugzilla.suse.com/1214578","tags":["report"]},{"url":"https://bugzilla.suse.com/1215939","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-21679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20313","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-28463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-1289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-34151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5341","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-20176","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4988-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5335-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20176","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7164-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-14528","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-19667","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25665","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25666","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25674","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25675","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25676","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27750","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27751","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27753","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27754","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27755","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27756","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27757","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27759","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27760","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27761","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27762","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27763","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27764","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27765","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27766","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27768","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27769","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27770","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27771","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27772","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27773","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27774","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27776","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-13144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-25664","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20243","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UJUC2DLRAUEA76AUONRX7RN5HCFF25LX/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJDAKFUPFUQCL6CS2YBK2EAJXXFEXMKK/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-20176","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-05T00:00:00Z","modified":"2024-08-03T17:30:07.469Z","cwes":["CWE-369"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7633","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-05T00:00:00Z","modified":"2024-08-03T17:30:07Z","updated_at":"2026-11-03T03:25:09.355483Z"}],"ghsa":[{"id":"GHSA-rjh9-hq94-crmg","title":"A flaw was found in ImageMagick in MagickCore/gem.c. An attacker who submits a crafted file that...","description":"A flaw was found in ImageMagick in MagickCore/gem.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.10-56.","status":"published","published":"2022-05-24T17:41:13Z","modified":"2023-05-30T05:00:59Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:54:37.218716Z"}],"nvd":[{"id":"CVE-2021-20176","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-06T00:15:12.92Z","modified":"2026-06-17T03:33:25.243Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:06:49.660551Z"}],"osv":[{"id":"ALPINE-CVE-2021-20176","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-06T00:15:12.92Z","modified":"2026-11-03T06:32:46.314730181Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"CVE-2021-20176","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-06T00:15:12.92Z","modified":"2026-10-24T10:31:03.944768902Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2021-20176","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-06T00:15:12.92Z","modified":"2026-10-23T18:02:41.019207426Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"JLSEC-2026-877","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:48.848438617Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2021-1110","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-27763)\r\n\r\nA flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27773)\r\n\r\nThe PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-25665)\r\n\r\nWriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value with a call to MagickMin() to ensure the proper value is used. This could impact application availability when a specially crafted input file is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-25674)\r\n\r\nA flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.(CVE-2020-27750)\r\n\r\nA divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20176)\r\n\r\nIn ImageMagick, there is an outside the range of representable values of type \u0026apos;unsigned int\u0026apos; at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27768)\r\n\r\nA flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20241)\r\n\r\nA flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20243)\r\n\r\nA flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20244)\r\n\r\nA flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.(CVE-2021-20246)","status":"published","published":"2021-04-07T11:04:20Z","modified":"2026-08-18T01:15:22.600929842Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-20176","description":"A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.","status":"published","published":"2021-02-06T00:15:00Z","modified":"2026-04-22T12:45:17.906594Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"CLSA-2021-1635459194","title":"Fix CVE(s): CVE-2021-20313, CVE-2021-20312, CVE-2021-20311, CVE-2020-27766, CVE-2021-20176, CVE-2021-, CVE-2021-20309, CVE-2021-20241, CVE-2021-20243, CVE-2021-20244, CVE-2021-20246","description":"\n   * SECURITY UPDATE: undefined behavior\n     - debian/patches/CVE-2020-27766.patch: fix undefined behavior\n       in the form of values outside the range of 'unsigned long' type.\n     - CVE-2020-27766\n   * SECURITY UPDATE: division by zero\n     - debian/patches/CVE-2021-*.patch: fix potential division by zero\n       in many places.\n     - CVE-2021-20176, CVE-2021-20241, CVE-2021-20243,\n       CVE-2021-20244, CVE-2021-20246, CVE-2021-20309,\n       CVE-2021-20311\n   * SECURITY UPDATE: integer overflow\n     - debian/patches/CVE-2021-20312.patch: fix potential integer overflow\n       in coders/thumbnail.c which can affect system availability.\n     - CVE-2021-20312\n   * SECURITY UPDATE: data leak\n     - debian/patches/CVE-2021-20313.patch: ensure memory is always zeroed\n       in magick/memory.c.\n     - CVE-2021-20313","status":"published","published":"2021-10-28T22:13:14Z","modified":"2026-06-04T10:03:36.517888206Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-2602-1","title":"imagemagick - security update","status":"published","published":"2021-03-22T00:00:00Z","modified":"2026-03-09T01:18:27.779446Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3429-1","title":"imagemagick - security update","status":"published","published":"2023-05-21T00:00:00Z","modified":"2026-03-09T01:20:37.642785Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"openSUSE-SU-2021:1583-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2021-20176: Fixed division by zero caused by processing crafted file (bsc#1181836).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2021-12-13T23:06:14Z","modified":"2026-02-04T03:39:19.352866Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3996-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2021-20176: Fixed division by zero caused by processing crafted file (bsc#1181836).\n","status":"published","published":"2021-12-10T16:32:48Z","modified":"2026-02-04T04:32:22.999302Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:0528-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2021-20176: Fixed an issue where processing a crafted file could lead to division by zero (bsc#1181836).\n- CVE-2020-27767: outside the range of representable values of type 'float' at MagickCore/quantum.h (bsc#1179322).\n","status":"published","published":"2021-02-19T13:53:39Z","modified":"2026-02-04T02:48:27.12621Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:3996-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2021-20176: Fixed division by zero caused by processing crafted file (bsc#1181836).\n","status":"published","published":"2021-12-10T16:32:42Z","modified":"2026-02-04T04:38:11.021118Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2023:4634-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n    \nSecurity issues:\n\n- CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939)\n- CVE-2020-21679: Fixed a buffer overflow in WritePCXImage function in pcx.c which may allow a remote attackers to cause a denial of service. (bsc#1214578)\n- CVE-2023-3745: Fixed heap out of bounds read in PushCharPixel() in quantum-private.h (bsc#1213624).\n- CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791).\n- CVE-2023-1289: Fixed segmentation fault and possible DoS via specially crafted SVG. (bsc#1209141)\n- CVE-2022-44268: Fixed arbitrary file disclosure when parsing a PNG image (bsc#1207983).\n- CVE-2022-44267: Fixed a denial of service when parsing a PNG image (bsc#1207982).\n- CVE-2022-32547: Fixed a load of misaligned address at MagickCore/property.c. (bsc#1200387)\n- CVE-2022-32546: Fixed an outside the range of representable values of type. (bsc#1200389)\n- CVE-2022-32545: Fixed an outside the range of representable values of type. (bsc#1200388)\n- CVE-2022-28463: Fixed buffer overflow in coders/cin.c (bsc#1199350).\n- CVE-2022-2719: Fixed a reachable assertion that could lead to denial of service via a crafted file (bsc#1202250).\n- CVE-2022-0284: Fixed heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h (bsc#1195563).\n- CVE-2021-3574: Fixed memory leaks with convert command (bsc#1203212).\n- CVE-2021-20313: Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c (bsc#1184628)\n- CVE-2021-20312: Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c (bsc#1184627)\n- CVE-2021-20311: Division by zero in sRGBTransformImage() in MagickCore/colorspace.c (bsc#1184626)\n- CVE-2021-20309: Division by zero in WaveImage() of MagickCore/visual-effects. (bsc#1184624)\n- CVE-2021-20246: Division by zero in ScaleResampleFilter in MagickCore/resample.c (bsc#1182337).\n- CVE-2021-20244: Division by zero in ImplodeImage in MagickCore/visual-effects.c (bsc#1182325).\n- CVE-2021-20243: Division by zero in GetResizeFilterWeight in MagickCore/resize.c (bsc#1182336).\n- CVE-2021-20241: Division by zero in WriteJP2Image() in coders/jp2.c (bsc#1182335).\n- CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file (bsc#1202800).\n- CVE-2021-20176: Fixed an issue where processing a crafted file could lead to division by zero (bsc#1181836).\n- CVE-2019-17540: Fixed heap-based buffer overflow in ReadPSInfo in coders/ps.c. (bsc#1153866)\n\nBugfixes:\n\n- Use png_get_eXIf_1 when available (bsc#1197147).\n","status":"published","published":"2023-12-01T16:57:31Z","modified":"2026-02-04T02:42:32.321075Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-4988-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nimage files. If a user or automated system using ImageMagick were tricked\ninto opening a specially crafted image, an attacker could exploit this to\ncause a denial of service or possibly execute code with the privileges of\nthe user invoking the program.\n","status":"published","published":"2021-06-15T11:11:56Z","modified":"2026-04-27T18:47:21.463272201Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-5335-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled certain values\nwhen processing XPM image data or large images. If a user or automated\nsystem using ImageMagick were tricked into opening a specially crafted\nimage, an attacker could exploit this to cause a denial of service or\npossibly execute code with the privileges of the user invoking the program.\n(CVE-2020-19667, CVE-2017-13144)\n\nSuhwan Song discovered that ImageMagick incorrectly handled memory\nwhen processing PNG,PALM,MIFF image data. If a user or automated system\nusing ImageMagick were tricked into opening a specially crafted image,\nan attacker could exploit this to cause a denial of service or possibly\nexecute code with the privileges of the user invoking the program.\n(CVE-2020-25664, CVE-2020-25665, CVE-2020-25674, CVE-2020-27753)\n\nSuhwan Song discovered that ImageMagick incorrectly handled certain values\nwhen processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service.\n(CVE-2020-25676, CVE-2020-27750, CVE-2020-27760, CVE-2020-27762,\nCVE-2020-27766, CVE-2020-27770)\n\nZhang Xiaohui discovered that ImageMagick incorrectly handled certain values\nwhen processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service.\n(CVE-2021-20176, CVE-2021-20241, CVE-2021-20243)\n","status":"published","published":"2022-03-18T11:18:34Z","modified":"2026-06-25T13:31:04.802653438Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-7164-1","title":"imagemagick vulnerability","description":"It was discovered that ImageMagick incorrectly handled certain malformed\nfiles. If a user or automated system were tricked into opening a specially\ncrafted file, an attacker could possibly exploit this to cause a denial of\nservice.\n","status":"published","published":"2024-12-17T11:47:09Z","modified":"2026-04-27T17:47:14.646185669Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}