CVE-2017-12641 — ImageMagick: Memory leak in ReadOneJNGImage function in coders\png.c

HIGH

ImageMagick: Memory leak in ReadOneJNGImage function in coders\png.c

Published Aug 7, 2017

8.8

HIGH

CVSS 3.1

EPSS 1.40%

ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	ImageMagick	Will not fix	n/a
Red Hat Enterprise Linux 6	ImageMagick	Will not fix	n/a
Red Hat Enterprise Linux 7	ImageMagick	Will not fix	n/a
Red Hat OpenShift Enterprise 2	ImageMagick	Will not fix	n/a

No remediation recorded yet.

1.40% 0.01397

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01397

2021–2026

Table of values (9 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.40% (0.01397)	71.44th	v5 (v2026.06.15)
Sep 20, 2026	1.40% (0.01397)	71.22th	v5 (v2026.06.15)
Jul 20, 2024	0.17% (0.00169)	54.29th	v3 (v2023.03.01)
Jul 17, 2024	0.17% (0.00169)	54.27th	v3 (v2023.03.01)
Mar 7, 2023	0.17% (0.00170)	52.26th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Feb 4, 2022	0.89% (0.00885)	10.50th	v2 (v2022.01.01)
Feb 3, 2022	0.62% (0.00624)	17.80th	v5 (v2026.06.15)
Apr 14, 2021	0.62% (0.00624)	0.00th	v1

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-772

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2017-12641		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1483091		Issue Tracking
https://github.com/ImageMagick/ImageMagick/commit/c9aa9f80828594eacbe3affe16c43d623562e5d8		x_refsource_CONFIRMPatchVendor Advisory
https://github.com/ImageMagick/ImageMagick/issues/550		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-12641
https://www.cve.org/CVERecord?id=CVE-2017-12641