CWE-369: Divide By Zero, page 5

The product divides a value by zero.

What the weakness is: CWE-369 at MITRE. OWASP Top 10: A10:2025 Mishandling of Exceptional Conditions

1. 7.5CVE-2023-51107EPSS 0.7%2023-12-26

   A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the exi…

2. 7.5CVE-2023-51106EPSS 0.7%2023-12-26

   A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero.

3. 7.5CVE-2023-51105EPSS 0.9%2023-12-26

   A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c.

4. 7.5CVE-2023-51104EPSS 0.9%2023-12-26

   A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.

5. 7.5CVE-2023-51103EPSS 0.9%2023-12-26

   A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c.

6. 7.5CVE-2023-46849EPSS 1.1%2023-11-11

   Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an application crash, leading to a denial of service.

7. 5.5CVE-2023-42467EPSS 0.4%2023-09-11

   QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.

8. 5.5CVE-2023-4678EPSS 0.3%2023-08-31

   Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV.

9. 6.5CVE-2023-2906EPSS 2.8%2023-08-25

   Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 through 4.0.7 is susceptible to a divide by zero allowing for a denial of service attack.

10. 6.5CVE-2021-46312EPSS 1.0%2023-08-22

    An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.

11. 6.5CVE-2021-46310EPSS 1.0%2023-08-22

    An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.

12. 7.5CVE-2021-40211EPSS 1.0%2023-08-22

    An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.

13. 5.5CVE-2020-21710EPSS 0.7%2023-08-22

    A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.

14. 5.5CVE-2023-20588EPSS 11%2023-08-08

    A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

15. 7.8CVE-2023-3896EPSS 0.4%2023-08-07

    Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

16. 7.5CVE-2023-38672EPSS 0.7%2023-07-26

    FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.

17. 6.5CVE-2023-37769EPSS 0.6%2023-07-17

    stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixman-combine-float.c.

18. 7.5CVE-2021-32494EPSS 0.8%2023-07-07

    Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.

19. 5.5CVE-2023-30207EPSS 0.3%2023-07-05

    A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file.

20. 3.3CVE-2023-3044EPSS 0.3%2023-06-02

    An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large p…

21. 7.5CVE-2022-47525EPSS 0.8%2023-05-31

    Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the packet parser. A remote attacker could leverage this vulnerability to cause a denial-of-service. Exploitation of this issue does not require user…

22. 7.5CVE-2023-2839EPSS 0.6%2023-05-22

    Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2.

23. 5.5CVE-2023-2662EPSS 0.3%2023-05-11

    In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.

24. 6.5CVE-2023-32573EPSS 0.9%2023-05-10

    In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.

25. 6.5CVE-2023-29659EPSS 0.9%2023-05-05

    A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.

26. 5.5CVE-2023-31085EPSS 0.4%2023-04-24

    An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

27. 3.3CVE-2023-25511EPSS 0.2%2023-04-22

    NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may lead to a limited denial of service.

28. 7.8CVE-2023-1127EPSS 0.5%2023-03-01

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.

29. 7.5CVE-2023-23109EPSS 0.7%2023-02-27

    In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide by zero fault in the function opdiv.

30. 5.5CVE-2023-0615EPSS 0.2%2023-02-06

    A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. This issue occurs when a user triggers ioctls, such as VIDIOC_S_DV_TIMINGS ioctl. This could allow a…

31. 7.8CVE-2023-0512EPSS 0.5%2023-01-30

    Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.

32. 7.8CVE-2023-21789EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

33. 3.3CVE-2022-41287EPSS 0.3%2022-12-13

    A vulnerability has been identified in JT2Go (All versions < V14.1.0.6), Teamcenter Visualization V13.2 (All versions < V13.2.0.12), Teamcenter Visualization V13.3 (All versions < V13.3.0.8), Teamcenter Visualization V14.0 (All versions < …

34. 5.7CVE-2022-39318EPSS 1.0%2022-11-16

    FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing input validation in `urbdrc` channel. A malicious server can trick a FreeRDP based client to crash with division by zero. This issue ha…

35. 7.5CVE-2022-35996EPSS 0.5%2022-09-16

    TensorFlow is an open source platform for machine learning. If `Conv2D` is given empty `input` and the `filter` and `padding` sizes are valid, the output is all-zeros. This causes division-by-zero floating point exceptions that can be used…

36. 5.5CVE-2022-38850EPSS 0.3%2022-09-15

    The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c.

37. 5.5CVE-2022-38865EPSS 0.3%2022-09-15

    Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

38. 5.5CVE-2022-38860EPSS 0.3%2022-09-15

    Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

39. 6.5CVE-2022-38266EPSS 1.5%2022-09-09

    An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

40. 5.5CVE-2022-3061EPSS 0.3%2022-09-01

    Found Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the driver through ioctl() interface. The driver doesn't check the value of 'pixclock', so it may cause a divide by zero error.

41. 5.5CVE-2021-4216EPSS 0.2%2022-08-26

    A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream.

42. 5.5CVE-2021-33844EPSS 0.5%2022-08-25

    A floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of wav.c file. An attacker with a crafted wav file, could cause an application to crash.

43. 5.5CVE-2021-23210EPSS 0.5%2022-08-25

    A floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples() of voc.c file. An attacker with a crafted file, could cause an application to crash.

44. 5.5CVE-2020-27802EPSS 0.3%2022-08-25

    An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file.

45. 5.5CVE-2020-27790EPSS 0.3%2022-08-18

    A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could cause a crash leading to a denial of ser…

46. 6.5CVE-2022-2058EPSS 1.3%2022-06-30

    Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

47. 6.5CVE-2022-2057EPSS 1.3%2022-06-30

    Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

48. 6.5CVE-2022-2056EPSS 1.3%2022-06-30

    Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010.

49. 7.5CVE-2021-3432EPSS 0.9%2022-06-28

    Invalid interval in CONNECT_IND leads to Division by Zero. Zephyr versions >= v1.14.0 Divide By Zero (CWE-369). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4

50. 7.5CVE-2021-33654EPSS 0.9%2022-06-27

    When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception.