CVE-2020-27760: debian debian_linux Divide By Zero
Vulnerability summary
CVE-2020-27760 is a medium (CVSS 5.5) Divide By Zero vulnerability in debian debian_linux. EPSS estimates a 1.43% chance of exploitation in the next 30 days, higher than 72.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 12 · Related 10Timeline
- 03-12-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.43%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.43% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- imagemagick< 8:6.9.11.24+dfsg-1
- debian_linuxEOL9.0
Imagemagick1 product
- imagemagick< 6.9.10-68 | ≥ 7.0.0-0, < 7.0.8-68
Ubuntu1 product
- imagemagick< 8:6.8.9.9-7ubuntu5.16+esm2 | < 8:6.9.7.4+dfsg-16ubuntu6.11 | < 8:6.9.10.23+dfsg-2.1ubuntu11.4
3 vendors · 4 products
