High severity8.8NVD Advisory· Published Dec 27, 2017· Updated May 13, 2026
CVE-2017-17879
CVE-2017-17879
Description
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.securityfocus.com/bid/102305nvdThird Party AdvisoryVDB Entry
- github.com/ImageMagick/ImageMagick/issues/906nvdIssue TrackingVendor Advisory
- lists.debian.org/debian-lts-announce/2018/01/msg00000.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/3681-1/nvdThird Party Advisory
- www.debian.org/security/2017/dsa-4074nvdThird Party Advisory
- www.debian.org/security/2018/dsa-4204nvdThird Party Advisory
News mentions
0No linked articles in our index yet.