CVE-2021-20311

Name	CVE-2021-20311
Description	A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
imagemagick (PTS)	bullseye	8:6.9.11.60+dfsg-1.3+deb11u4	vulnerable
	bullseye (security)	8:6.9.11.60+dfsg-1.3+deb11u3	vulnerable
	bookworm	8:6.9.11.60+dfsg-1.6+deb12u2	vulnerable
	bookworm (security)	8:6.9.11.60+dfsg-1.6+deb12u1	vulnerable
	sid, trixie	8:7.1.1.39+dfsg1-3	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
imagemagick	source	(unstable)	(unfixed)	unimportant

https://github.com/ImageMagick/ImageMagick/commit/70aa86f5d5d8aa605a918ed51f7574f433a18482