{"id":"CVE-2017-11644","aliases":["DEBIAN-CVE-2017-11644","DLA-1081-1","EUVD-2017-3256","GHSA-6m36-3rf7-2wpf","SUSE-SU-2018:0130-1","SUSE-SU-2018:0132-1","UBUNTU-CVE-2017-11644"],"status":"published","title":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01616,"percentile":0.7616,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-772"],"published":"2017-07-26T08:00:00Z","modified":"2026-10-24T10:49:27Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-14"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-14"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-14"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-14"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-14"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-14"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u16"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u10","8:6.7.7.10-5+deb7u11","8:6.7.7.10-5+deb7u12","8:6.7.7.10-5+deb7u13","8:6.7.7.10-5+deb7u14","8:6.7.7.10-5+deb7u15","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5","8:6.7.7.10-5+deb7u6","8:6.7.7.10-5+deb7u7","8:6.7.7.10-5+deb7u8","8:6.7.7.10-5+deb7u9"],"bundled":74},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11","8:6.7.7.10-6ubuntu3.13+esm12","8:6.7.7.10-6ubuntu3.13+esm13","8:6.7.7.10-6ubuntu3.13+esm14","8:6.7.7.10-6ubuntu3.13+esm15","8:6.7.7.10-6ubuntu3.13+esm16","8:6.7.7.10-6ubuntu3.13+esm17","8:6.7.7.10-6ubuntu3.13+esm18","8:6.7.7.10-6ubuntu3.13+esm19","8:6.7.7.10-6ubuntu3.13+esm20","8:6.7.7.10-6ubuntu3.13+esm21","8:6.7.7.10-6ubuntu3.13+esm22","8:6.7.7.10-6ubuntu3.13+esm23","8:6.7.7.10-6ubuntu3.13+esm24","8:6.7.7.10-6ubuntu3.13+esm25","8:6.7.7.10-6ubuntu3.13+esm26","8:6.7.7.10-6ubuntu3.13+esm27"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10","8:6.8.9.9-7ubuntu5.16+esm11","8:6.8.9.9-7ubuntu5.16+esm12","8:6.8.9.9-7ubuntu5.16+esm13","8:6.8.9.9-7ubuntu5.16+esm14","8:6.8.9.9-7ubuntu5.16+esm15","8:6.8.9.9-7ubuntu5.16+esm16","8:6.8.9.9-7ubuntu5.16+esm17","8:6.8.9.9-7ubuntu5.16+esm18","8:6.8.9.9-7ubuntu5.16+esm19","8:6.8.9.9-7ubuntu5.16+esm20","8:6.8.9.9-7ubuntu5.16+esm21","8:6.8.9.9-7ubuntu5.16+esm22","8:6.8.9.9-7ubuntu5.16+esm23","8:6.8.9.9-7ubuntu5.16+esm24","8:6.8.9.9-7ubuntu5.16+esm25","8:6.8.9.9-7ubuntu5.16+esm26"]}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"http://www.securityfocus.com/bid/100014","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/587","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-11644"},{"url":"https://github.com/advisories/GHSA-6m36-3rf7-2wpf"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-11644","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180130-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047044","tags":["report"]},{"url":"https://bugzilla.suse.com/1047898","tags":["report"]},{"url":"https://bugzilla.suse.com/1050120","tags":["report"]},{"url":"https://bugzilla.suse.com/1050606","tags":["report"]},{"url":"https://bugzilla.suse.com/1051446","tags":["report"]},{"url":"https://bugzilla.suse.com/1052468","tags":["report"]},{"url":"https://bugzilla.suse.com/1052550","tags":["report"]},{"url":"https://bugzilla.suse.com/1052710","tags":["report"]},{"url":"https://bugzilla.suse.com/1052720","tags":["report"]},{"url":"https://bugzilla.suse.com/1052731","tags":["report"]},{"url":"https://bugzilla.suse.com/1052732","tags":["report"]},{"url":"https://bugzilla.suse.com/1055065","tags":["report"]},{"url":"https://bugzilla.suse.com/1055323","tags":["report"]},{"url":"https://bugzilla.suse.com/1055434","tags":["report"]},{"url":"https://bugzilla.suse.com/1055855","tags":["report"]},{"url":"https://bugzilla.suse.com/1058640","tags":["report"]},{"url":"https://bugzilla.suse.com/1059751","tags":["report"]},{"url":"https://bugzilla.suse.com/1074123","tags":["report"]},{"url":"https://bugzilla.suse.com/1074969","tags":["report"]},{"url":"https://bugzilla.suse.com/1074973","tags":["report"]},{"url":"https://bugzilla.suse.com/1074975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5247","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180132-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1042948","tags":["report"]},{"url":"https://bugzilla.suse.com/1049373","tags":["report"]},{"url":"https://bugzilla.suse.com/1051412","tags":["report"]},{"url":"https://bugzilla.suse.com/1052252","tags":["report"]},{"url":"https://bugzilla.suse.com/1052771","tags":["report"]},{"url":"https://bugzilla.suse.com/1058082","tags":["report"]},{"url":"https://bugzilla.suse.com/1072902","tags":["report"]},{"url":"https://bugzilla.suse.com/1074122","tags":["report"]},{"url":"https://bugzilla.suse.com/1074425","tags":["report"]},{"url":"https://bugzilla.suse.com/1074610","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9409","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-11644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-11644","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-11644","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2017-07-26T08:00:00Z","modified":"2024-08-05T18:12:40.913Z","updated_at":"2026-11-02T14:33:19.848632Z"}],"euvd":[{"id":"EUVD-2017-3256","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2017-07-26T08:00:00Z","modified":"2024-08-05T18:12:40Z","updated_at":"2026-11-03T02:23:23.105133Z"}],"ghsa":[{"id":"GHSA-6m36-3rf7-2wpf","title":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2022-05-13T01:42:28Z","modified":"2023-02-02T05:00:47Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:51:02.804004Z"}],"nvd":[{"id":"CVE-2017-11644","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2017-07-26T08:29:00.603Z","modified":"2026-06-17T01:02:08.19Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:03:54.862898Z"}],"osv":[{"id":"CVE-2017-11644","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2017-07-26T08:29:00.603Z","modified":"2026-10-24T10:49:27.65994178Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:03.851821Z"},{"id":"DEBIAN-CVE-2017-11644","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2017-07-26T08:29:00.603Z","modified":"2026-09-01T20:03:41.805872808Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"UBUNTU-CVE-2017-11644","description":"When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.","status":"published","published":"2017-07-26T08:29:00Z","modified":"2026-10-01T00:18:26.737062779Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:13.729565Z"},{"id":"DLA-1081-1","title":"imagemagick - security update","status":"published","published":"2017-08-31T00:00:00Z","modified":"2026-03-09T01:01:57.089204Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"SUSE-SU-2018:0130-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-5246: Fixed memory leak vulnerability in ReadPATTERNImage in\n  coders/pattern.c (bsc#1074973)\n- CVE-2017-18022: Fixed memory leak vulnerability in MontageImageCommand in\n  MagickWand/montage.c (bsc#1074975)\n- CVE-2018-5247: Fixed memory leak vulnerability in ReadRLAImage in\n  coders/rla.c (bsc#1074969)\n- CVE-2017-12672: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service (bsc#1052720)\n- CVE-2017-13060: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service via a crafted file (bsc#1055065)\n- CVE-2017-11724: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c involving the quantum_info and clone_info\n  data structures (bsc#1051446)\n- CVE-2017-12670: Added validation in coders/mat.c to prevent an assertion\n  failure in the function DestroyImage in MagickCore/image.c, which\n  allowed attackers to cause a denial of service (bsc#1052731)\n- CVE-2017-12667: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1052732)\n- CVE-2017-13146: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055323)\n- CVE-2017-10800: Processing MATLAB images in coders/mat.c could have lead to a\n  denial of service (OOM) in ReadMATImage() if the size specified for a\n  MAT Object was larger than the actual amount of data (bsc#1047044)\n- CVE-2017-13648: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055434)\n- CVE-2017-11141: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders\\mat.c that could have caused memory exhaustion\n  via a crafted MAT file, related to incorrect ordering of a\n  SetImageExtent call (bsc#1047898)\n- CVE-2017-11529: The ReadMATImage function in coders/mat.c allowed remote\n  attackers to cause a denial of service (memory leak) via a crafted file\n  (bsc#1050120)\n- CVE-2017-12564: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service (bsc#1052468)\n- CVE-2017-12434: Added a missing NULL check in the function ReadMATImage in\n  coders/mat.c, which allowed attackers to cause a denial of service\n  (assertion failure) in DestroyImageInfo in image.c (bsc#1052550)\n- CVE-2017-12675: Added a missing check for multidimensional data coders/mat.c,\n  that could have lead to a memory leak in the function ReadImage in\n  MagickCore/constitute.c, which allowed attackers to cause a denial of\n  service (bsc#1052710)\n- CVE-2017-14326: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service via a crafted file (bsc#1058640)\n- CVE-2017-11644: Processesing a crafted file in convert could have lead to a\n  memory leak in the ReadMATImage() function in coders/mat.c\n  (bsc#1050606)\n- CVE-2017-13658: Added a missing NULL check in the ReadMATImage function in\n  coders/mat.c, which could have lead to a denial of service (assertion\n  failure and application exit) in the DestroyImageInfo function in\n  MagickCore/image.c (bsc#1055855)\n- CVE-2017-14533: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1059751)\n- CVE-2017-17881: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted MAT image file (bsc#1074123)\n\n","status":"published","published":"2018-01-18T10:38:47Z","modified":"2025-05-02T04:06:05.935109Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0132-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-12672: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service (bsc#1052720).\n- CVE-2017-13060: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted file (bsc#1055065).\n- CVE-2017-11724: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c involving the quantum_info and clone_info data\n  structures (bsc#1051446).\n- CVE-2017-12670: Added validation in coders/mat.c to prevent an assertion\n  failure in the function DestroyImage in MagickCore/image.c, which allowed\n  attackers to cause a denial of service (bsc#1052731).\n- CVE-2017-12667: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1052732).\n- CVE-2017-13146: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055323).\n- CVE-2017-10800: Processing MATLAB images in coders/mat.c could have lead to a\n  denial of service (OOM) in ReadMATImage() if the size specified for a MAT\n  Object was larger than the actual amount of data (bsc#1047044)\n- CVE-2017-13648: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055434).\n- CVE-2017-11141: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders\\mat.c that could have caused memory exhaustion via a\n  crafted MAT file, related to incorrect ordering of a SetImageExtent call\n  (bsc#1047898).\n- CVE-2017-11529: The ReadMATImage function in coders/mat.c allowed remote\n  attackers to cause a denial of service (memory leak) via a crafted file\n  (bsc#1050120).\n- CVE-2017-12564: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service (bsc#1052468).\n- CVE-2017-12434: Added a missing NULL check in the function ReadMATImage in\n  coders/mat.c, which allowed attackers to cause a denial of service (assertion\n  failure) in DestroyImageInfo in image.c (bsc#1052550).\n- CVE-2017-12675: Added a missing check for multidimensional data coders/mat.c,\n  that could have lead to a memory leak in the function ReadImage in\n  MagickCore/constitute.c, which allowed attackers to cause a denial of service\n  (bsc#1052710).\n- CVE-2017-14326: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted file (bsc#1058640).\n- CVE-2017-11644: Processesing a crafted file in convert could have lead to a\n  memory leak in the ReadMATImage() function in coders/mat.c (bsc#1050606).\n- CVE-2017-13658: Added a missing NULL check in the ReadMATImage function in\n  coders/mat.c, which could have lead to a denial of service (assertion failure\n  and application exit) in the DestroyImageInfo function in MagickCore/image.c\n  (bsc#1055855).\n- CVE-2017-14533: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1059751).\n- CVE-2017-17881: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted MAT image file (bsc#1074123).\n- CVE-2017-1000476: Prevent CPU exhaustion in the function ReadDDSInfo in\n  coders/dds.c, which allowed attackers to cause a denial of service\n  (bsc#1074610).\n- CVE-2017-9409: Fixed a memory leak vulnerability in the function ReadMPCImage\n  in mpc.c, which allowed attackers to cause a denial of service via a crafted\n  file (bsc#1042948).\n- CVE-2017-11449: coders/mpc did not enable seekable streams and thus could not\n  validate blob sizes, which allowed remote attackers to cause a denial of service\n  (application crash) or possibly have unspecified other impact via an image\n  received from stdin (bsc#1049373)\n- CVE-2017-12430: A memory exhaustion in the function ReadMPCImage in\n  coders/mpc.c allowed attackers to cause DoS (bsc#1052252)\n- CVE-2017-12642: Prevent a memory leak vulnerability in ReadMPCImage in\n  coders\\mpc.c via crafted file allowing for DoS (bsc#1052771)\n- CVE-2017-14249: A mishandled EOF check in ReadMPCImage in coders/mpc.c that\n  lead to a division by zero in GetPixelCacheTileSize in MagickCore/cache.c\n  allowed remote attackers to cause a denial of service via a crafted file\n  (bsc#1058082)\n- CVE-2017-1000445: Added a NUL pointer check in the MagickCore component that\n  might have lead to denial of service  (bsc#1074425).\n- CVE-2017-11751: Fixed a memory leak vulnerability in the function\n  WritePICONImage in coders/xpm.c that allowed remote attackers to cause a denial\n  of service via a crafted file (bsc#1051412).\n- CVE-2017-17680: Fixed a memory leak vulnerability in the function\n  ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of\n  service via a crafted xpm image file (bsc#1072902).\n- CVE-2017-17882: Fixed a memory leak vulnerability in the function\n  ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of\n  service via a crafted XPM image file (bsc#1074122).\n- CVE-2018-5246: Fixed memory leak vulnerability in ReadPATTERNImage in\n  coders/pattern.c (bsc#1074973).\n- CVE-2017-18022: Fixed memory leak vulnerability in MontageImageCommand in\n  MagickWand/montage.c (bsc#1074975)\n- CVE-2018-5247: Fixed memory leak vulnerability in ReadRLAImage in\n  coders/rla.c (bsc#1074969)\n","status":"published","published":"2018-01-18T10:37:33Z","modified":"2025-05-02T04:06:01.279269Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}