CVE-2017-17501
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a...
8.8 HighFix available
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
2.60%Up 0.5 points since Apr 14, 2021
What each source reports
NVD Score used
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
CVE-2017-17501- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
CVE-2017-17501- Updated
- 2026-11-02
EUVDEUVD-2017-8662 No score
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
EUVD-2017-8662- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m5ph-57mx-hhc9
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a...
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
GHSA-m5ph-57mx-hhc9- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
CVE-2017-17501- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-17501
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
DEBIAN-CVE-2017-17501- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2017-17501
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
- Record
UBUNTU-CVE-2017-17501- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVSUSE-SU-2018:0413-1 No score
Security update for GraphicsMagick
This update for GraphicsMagick fixes several issues.
These security issues were fixed:
- CVE-2017-13065: Prevent NULL pointer dereference in the function SVGStartElement (bsc#1055038).
- CVE-2018-5685: Prevent infinite loop and application hang in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value (bsc#1075939).
- CVE-2017-9262: The ReadJNGImage function in coders/png.c allowed attackers to cause a denial of service (memory leak) via a crafted file (bsc#1043353)
- CVE-2017-9261: The ReadMNGImage function in coders/png.c allowed attackers to cause a denial of service (memory leak) via a crafted file (bsc#1043354)
- CVE-2017-10995: The mng_get_long function in coders/png.c allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image (bsc#1047908)
- CVE-2017-11102: The ReadOneJNGImage function allowed remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length color_image data structure (bsc#1047910).
- CVE-2017-11539: Prevent memory leak in the ReadOnePNGImage() function in coders/png.c (bsc#1050037)
- CVE-2017-11505: The ReadOneJNGImage function in coders/png.c allowed remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file (bsc#1050072)
- CVE-2017-11526: The ReadOneMNGImage function in coders/png.c allowed remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file (bsc#1050100)
- CVE-2017-11750: The ReadOneJNGImage function in coders/png.c allowed remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file (bsc#1051442)
- CVE-2017-12565: Prevent memory leak in the function ReadOneJNGImage in coders/png.c, which allowed attackers to cause a denial of service (bsc#1052470)
- CVE-2017-12676: Prevent memory leak in the function ReadOneJNGImage in coders/png.c, which allowed attackers to cause a denial of service (bsc#1052708)
- CVE-2017-12673: Prevent memory leak in the function ReadOneMNGImage in coders/png.c, which allowed attackers to cause a denial of service (bsc#1052717)
- CVE-2017-12643: Prevent a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c (bsc#1052768)
- CVE-2017-12641: Prevent a memory leak vulnerability in ReadOneJNGImage in coders\png.c (bsc#1052777)
- CVE-2017-12640: Prevent an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c (bsc#1052781)
- CVE-2017-12935: The ReadMNGImage function in coders/png.c mishandled large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c (bsc#1054600)
- CVE-2017-13147: Prevent allocation failure in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value (bsc#1055374)
- CVE-2017-13142: Added additional checks for short files to prevent a crafted PNG file from triggering a crash (bsc#1055455)
- CVE-2017-13141: Prevent memory leak in ReadOnePNGImage in coders/png.c (bsc#1055456)
- CVE-2017-14103: The ReadJNGImage and ReadOneJNGImage functions in coders/png.c did not properly manage image pointers after certain error conditions, which allowed remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call (bsc#1057000)
- CVE-2017-14649: ReadOneJNGImage in coders/png.c did not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c, and application crash) (bsc#1060162)
- CVE-2017-15218: Prevent memory leak in ReadOneJNGImage in coders/png.c (bsc#1062752)
- CVE-2017-15238: ReadOneJNGImage had a use-after-free issue when the height or width is zero, related to ReadJNGImage (bsc#1067198).
- CVE-2017-17782: Prevent heap-based buffer over-read in…
- Record
SUSE-SU-2018:0413-1- Updated
- 2026-11-02
OSVUSN-4248-1 No score
graphicsmagick vulnerabilities
It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
- Record
USN-4248-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
graphicsmagickDebian:12 |
before 1.3.27-1 | 1.3.27-1 |
graphicsmagickDebian:13 |
before 1.3.27-1 | 1.3.27-1 |
graphicsmagickDebian:14 |
before 1.3.27-1 | 1.3.27-1 |
graphicsmagickDebian:7 From an advisory covering 8 CVEs |
before 1.3.16-1.1+deb7u16, plus listed versions 1.3.16-1.11.3.16-1.1+deb7u11.3.16-1.1+deb7u101.3.16-1.1+deb7u111.3.16-1.1+deb7u12 Show 11 moreShow less1.3.16-1.1+deb7u131.3.16-1.1+deb7u141.3.16-1.1+deb7u151.3.16-1.1+deb7u21.3.16-1.1+deb7u31.3.16-1.1+deb7u41.3.16-1.1+deb7u51.3.16-1.1+deb7u61.3.16-1.1+deb7u71.3.16-1.1+deb7u81.3.16-1.1+deb7u9 |
1.3.16-1.1+deb7u16 |
graphicsmagickDebian:8 From an advisory covering 27 CVEs |
before 1.3.20-3+deb8u3, plus listed versions 1.3.20-3+deb8u11.3.20-3+deb8u2 |
1.3.20-3+deb8u3 |
graphicsmagickDebian:9 From an advisory covering 56 CVEs |
before 1.3.30+hg15796-1~deb9u1, plus listed versions 1.3.25-81.3.26-11.3.26-101.3.26-111.3.26-12 Show 24 moreShow less1.3.26-131.3.26-141.3.26-151.3.26-161.3.26-171.3.26-181.3.26-191.3.26-21.3.26-31.3.26-41.3.26-51.3.26-61.3.26-71.3.26-81.3.26-91.3.27-11.3.27-21.3.27-31.3.27-41.3.28-11.3.28-21.3.29+hg15665-11.3.29-11.3.30-1 |
1.3.30+hg15796-1~deb9u1 |
GraphicsMagickSUSE:Linux Enterprise Software Development Kit 11 SP4 From an advisory covering 34 CVEs |
before 1.2.5-4.78.33.1 | 1.2.5-4.78.33.1 |
GraphicsMagickSUSE:Studio Onsite 1.3 From an advisory covering 34 CVEs |
before 1.2.5-4.78.33.1 | 1.2.5-4.78.33.1 |
graphicsmagickUbuntu:Pro:14.04:LTS |
before 1.3.18-1ubuntu3.1+esm5, plus listed versions 1.3.16-1.1ubuntu21.3.16-1.1ubuntu31.3.18-1ubuntu31.3.18-1ubuntu3.11.3.18-1ubuntu3.1+esm11.3.18-1ubuntu3.1+esm21.3.18-1ubuntu3.1+esm31.3.18-1ubuntu3.1+esm4 |
1.3.18-1ubuntu3.1+esm5 |
graphicsmagickUbuntu:16.04:LTS |
before 1.3.23-1ubuntu0.5, plus listed versions 1.3.21-31.3.23-11.3.23-1build11.3.23-1ubuntu0.11.3.23-1ubuntu0.21.3.23-1ubuntu0.31.3.23-1ubuntu0.4 |
1.3.23-1ubuntu0.5 |
graphicsmagickUbuntu:16.04:LTS From an advisory covering 10 CVEs |
before 1.3.23-1ubuntu0.5, plus listed versions 1.3.21-31.3.23-11.3.23-1build11.3.23-1ubuntu0.11.3.23-1ubuntu0.21.3.23-1ubuntu0.31.3.23-1ubuntu0.4 |
1.3.23-1ubuntu0.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-17501 is a high vulnerability (CVSS 8.8) in Graphicsmagick, published December 11, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.60%, the 85th percentile. Fixed in graphicsmagick 1.3.27-1.
References
sourceforge.net/p/graphicsmagick/bugs/526
debian.org/security/2018/dsa-4321
lists.debian.org/debian-lts-announce/2018/06/msg00009.html
securityfocus.com/bid/102185
hg.code.sf.net/p/graphicsmagick/code/rev/5b8414c0d0c4
Show 84 moreShow less
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV
usn.ubuntu.com/4248-1
nvd.nist.gov/vuln/detail/CVE-2017-17501
github.com/advisories/GHSA-m5ph-57mx-hhc9
security-tracker.debian.org/tracker/CVE-2017-17501
suse.com/support/update/announcement/2018/suse-su-20180413-1
bugzilla.suse.com/1043353
ubuntu.com/security/CVE-2017-17501
cve.org/CVERecord?id=CVE-2017-17501
This page doesn't list everything
Left out here: the rest of 1 source description. The JSON record has them.