← All advisories

Critical severity9.8NVD Advisory· Published Jul 10, 2017· Updated Jun 17, 2026

CVE-2017-11139

CVE-2017-11139

Description

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.

Affected products

3

Graphicsmagick/Graphicsmagick2 versions
cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:graphicsmagick:graphicsmagick:1.3.26:*:*:*:*:*:*:*
- (no CPE)range: <=1.3.26
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

hg.code.sf.net/p/graphicsmagick/code/rev/4d0baa77245bnvdIssue TrackingPatchThird Party Advisory
www.securityfocus.com/bid/99504nvdThird Party AdvisoryVDB Entry
www.debian.org/security/2018/dsa-4321nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.