-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability description explicitly mentions sRGBTransformImage in MagickCore/colorspace.c as the location of the division by zero. The provided commit 70aa86f5d5d8aa605a918ed51f7574f433a18482 shows changes in this function where direct division by film_gamma is replaced by multiplication with the result of PerceptibleReciprocal(film_gamma). This is a standard way to handle potential division by zero. The same pattern of change was observed in the TransformsRGBImage function within the same file, indicating it was likely susceptible to the same vulnerability or was fixed as a preventative measure. The commit message also mentions "possible divide by zero". The other modified files in the commit relate to buffer clearing and thumbnail parsing, which are not directly related to the described division by zero in colorspace.c.
Ongoing coverage of React2Shell