In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "MagickCore/feature.c"
},
"source": "https://github.com/imagemagick/imagemagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc",
"digest": {
"line_hashes": [
"257338851475050578775486418440277654515",
"18818221762743927862888412051776098542",
"68010026463804182542121649108439342508",
"242016519962630399408319175319241661444"
],
"threshold": 0.9
},
"id": "CVE-2019-14981-7ab5954d"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "MagickCore/feature.c",
"function": "MeanShiftImage"
},
"source": "https://github.com/imagemagick/imagemagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc",
"digest": {
"length": 4096.0,
"function_hash": "31258807294992505986865275756036920522"
},
"id": "CVE-2019-14981-fb7c4108"
}
]
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "magick/feature.c",
"function": "MeanShiftImage"
},
"source": "https://github.com/imagemagick/imagemagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256",
"digest": {
"length": 4137.0,
"function_hash": "161224625496149328780634590066992155975"
},
"id": "CVE-2019-14981-0284e767"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "magick/feature.c"
},
"source": "https://github.com/imagemagick/imagemagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256",
"digest": {
"line_hashes": [
"257338851475050578775486418440277654515",
"18818221762743927862888412051776098542",
"68010026463804182542121649108439342508",
"242016519962630399408319175319241661444"
],
"threshold": 0.9
},
"id": "CVE-2019-14981-e76d344f"
}
]