NetSight
IP …
high7.5

CVE-2021-20312

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a…

Impact

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
before 7.0.11-0
DebianDebian Linux
Version 9.0

Weakness classification

CWE-190

References