Divide By Zero

CVE-2021-27847

Medium

6.5/10

Summary

Division-By-Zero vulnerability in Libvips before v8.8.0-rc1 in the function "vips_eye_point", eye.c, and function "vips_mask_point", mask.c.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: HIGH

CWE-369 - Divide By Zero

The product divides a value by zero.

References

Advisory Timeline

Published Jul 15, 2021