CVE-2017-11539 - ImageMagick: Memory leak in the ReadOnePNGImage() function

MEDIUM

ImageMagick: Memory leak in the ReadOnePNGImage() function

Published Jul 23, 2017

6.5

MEDIUM

CVSS 3.0

EPSS 2.06%

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c.

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	ImageMagick	Will not fix	n/a
Red Hat Enterprise Linux 6	ImageMagick	Will not fix	n/a
Red Hat Enterprise Linux 7	ImageMagick	Will not fix	n/a
Red Hat OpenShift Enterprise 2	ImageMagick	Will not fix	n/a

No remediation recorded yet.

Weaknesses (1)

CWE-772

Link	Providers	Tags
http://www.securityfocus.com/bid/99936		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://access.redhat.com/security/cve/CVE-2017-11539		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1474923		Issue Tracking
https://github.com/ImageMagick/ImageMagick/issues/582		x_refsource_CONFIRMExploitIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-11539
https://www.cve.org/CVERecord?id=CVE-2017-11539

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 23, 2017

Updated Aug 5, 2024

Reserved Jul 22, 2017

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity Low

Public date Jul 16, 2017