Search vulnerabilities

Results 561

Export CSV
CVE-2021-20309

ImagemMagick: Division by zero in WaveImage() of MagickCore/visual-effects.c

A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
CVE-2021-20246

ImageMagick: Division by zero in ScaleResampleFilter in MagickCore/resample.c

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2021-20245

ImageMagick: Division by zero in WriteAnimatedWEBPImage() in coders/webp.c

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2021-20244

ImageMagick: Division by zero in ImplodeImage in MagickCore/visual-effects.c

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2021-20243

ImageMagick: Division by zero in GetResizeFilterWeight in MagickCore/resize.c

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
CVE-2021-20241

ImageMagick: Division by zero in WriteJP2Image() in coders/jp2.c

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
CVE-2021-20205

libjpeg-turbo: DoS via open crafted GIF

Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
CVE-2021-20176

ImageMagick: processing crafted file leads to division by zero

A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2020-27773

ImageMagick: division by zero at MagickCore/gem-private.h

A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
CVE-2020-27765

ImageMagick: division by zero at MagickCore/segment.c

A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 3.3 Low EPSS 1.0% KEV · Not listed
CVE-2020-27763

ImageMagick: division by zero at MagickCore/resize.c

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
CVE-2020-27760

ImageMagick: division by zero at MagickCore/enhance.c

In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
CVE-2020-27756

ImageMagick: division by zero at MagickCore/geometry.c

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-27750

ImageMagick: division by zero in MagickCore/colorspace-private.h

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
CVE-2020-27661

QEMU: divide by zero in dwc2_handle_packet() in hw/usb/hcd-dwc2.c

A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-27560

ImageMagick: division by zero in OptimizeLayerFrames function in MagickCore/layer.c

ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service.

CVSS 3.1 · 3.3 Low EPSS 1.5% KEV · Not listed
CVE-2020-25708

libvncserver: libvncserver/rfbserver.c has a divide by zero which could result in DoS

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, when processed by the VNC server, would lead to a floating point exception, resulting in a denial of service.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
CVE-2020-23903

speex: divide by zero in read_samples() via crafted WAV file

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

CVSS 3.1 · 5.5 Medium EPSS 1.0% KEV · Not listed
CVE-2020-23567

Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to "Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea"

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-21710

ghostscript: Divide by zero in eps_print_page in gdevepsn.c

A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors