ByteOS Network

NVD Vulnerability Details :

CVE-2021-20312

Modified

Source-secalert@redhat.com

Published At-11 May, 2021 | 23:15

Updated At-22 May, 2023 | 02:15

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C

CPE Matches

ImageMagick Studio LLC

>>imagemagick>>Versions before 7.0.11-0(exclusive)

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>9.0

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-190	Primary	secalert@redhat.com

References

Hyperlink	Source	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1946742	secalert@redhat.com	Issue Tracking Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html	secalert@redhat.com	Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html	secalert@redhat.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History