VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 7, 2017· Updated May 13, 2026

CVE-2017-12665

CVE-2017-12665

Description

ImageMagick 7.0.6-2 has a memory leak in WritePICTImage that can cause denial of service or resource exhaustion.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

ImageMagick 7.0.6-2 has a memory leak in WritePICTImage that can cause denial of service or resource exhaustion.

Vulnerability

ImageMagick 7.0.6-2 contains a memory leak vulnerability in the WritePICTImage function in coders/pict.c. When processing a PICT image file, if memory allocation for scanline, packed_scanline, or buffer fails, the previously allocated memory is not freed, resulting in a leak [1].

Exploitation

An attacker can trigger the memory leak by supplying a specially crafted PICT image that causes a memory allocation failure during conversion. The victim must use ImageMagick's convert command or a similar tool to process the malformed image [1].

Impact

Repeated exploitation can exhaust available system memory, leading to a denial of service due to resource exhaustion. No code execution or information disclosure is possible [1].

Mitigation

The issue is fixed in ImageMagick commit c1b09bb [2] and subsequent releases. Users should upgrade to a patched version. If upgrading is not feasible, avoid processing untrusted PICT images [1][2].

References
  1. memory leak in WritePICTImage
  2. https://github.com/ImageMagick/ImageMagick/issues/577 · ImageMagick/ImageMagick@c1b09bb

AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

16

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.