CVE-2021-20310

7.5 highEPSS 1.3%

High (7.5) in imagemagick imagemagick. EPSS 1.3% chance of exploitation in the next 30 days.

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-369
Published: 2021-05-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

imagemagick:imagemagick

References

https://bugzilla.redhat.com/show_bug.cgi?id=1946728
https://bugzilla.redhat.com/show_bug.cgi?id=1946728

Check your stack JSON