CVE-2021-20312
CVE-2021-20312
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 2.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 may 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
Productos afectados
n/a · ImageMagick¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →