Medium severity6.5NVD Advisory· Published Sep 1, 2017· Updated May 13, 2026
CVE-2017-12691
CVE-2017-12691
Description
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.
Affected products
5- cpe:2.3:a:imagemagick:imagemagick:7.0.6-6:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/ImageMagick/ImageMagick/issues/656nvdIssue TrackingPatchThird Party Advisory
- security.gentoo.org/glsa/201711-07nvdThird Party Advisory
- usn.ubuntu.com/3681-1/nvdThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/05/msg00015.htmlnvd
- lists.debian.org/debian-lts-announce/2020/09/msg00007.htmlnvd
News mentions
0No linked articles in our index yet.