CVE Database
/

CVE-2020-27760

Back to search

CVE-2020-27760

Published: Dec 3, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.

VendorProductVersions

n/a

ImageMagick

affected
ImageMagick 7.0.8-68

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now