{"id":"CVE-2017-13658","aliases":["DEBIAN-CVE-2017-13658","DLA-1081-1","DLA-1785-1","DLA-2366-1","EUVD-2017-5175","GHSA-6m75-6pmc-2r2r","SUSE-SU-2018:0130-1","SUSE-SU-2018:0132-1","UBUNTU-CVE-2017-13658"],"status":"published","title":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the...","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01327,"percentile":0.71164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2017-08-24T06:00:00Z","modified":"2026-10-24T14:19:43Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-14"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-14"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.7.4+dfsg-14"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-14"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-14"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-14"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u16"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u10","8:6.7.7.10-5+deb7u11","8:6.7.7.10-5+deb7u12","8:6.7.7.10-5+deb7u13","8:6.7.7.10-5+deb7u14","8:6.7.7.10-5+deb7u15","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5","8:6.7.7.10-5+deb7u6","8:6.7.7.10-5+deb7u7","8:6.7.7.10-5+deb7u8","8:6.7.7.10-5+deb7u9"],"bundled":74},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u16"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u10","8:6.8.9.9-5+deb8u11","8:6.8.9.9-5+deb8u12","8:6.8.9.9-5+deb8u13","8:6.8.9.9-5+deb8u14","8:6.8.9.9-5+deb8u15","8:6.8.9.9-5+deb8u2","8:6.8.9.9-5+deb8u3","8:6.8.9.9-5+deb8u4","8:6.8.9.9-5+deb8u5","8:6.8.9.9-5+deb8u6","8:6.8.9.9-5+deb8u7","8:6.8.9.9-5+deb8u8","8:6.8.9.9-5+deb8u9"],"bundled":50},{"source":"osv","ecosystem":"Debian:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-11+deb9u10"}]}],"versions":["8:6.9.7.4+dfsg-11","8:6.9.7.4+dfsg-11+deb9u1","8:6.9.7.4+dfsg-11+deb9u2","8:6.9.7.4+dfsg-11+deb9u3","8:6.9.7.4+dfsg-11+deb9u4","8:6.9.7.4+dfsg-11+deb9u5","8:6.9.7.4+dfsg-11+deb9u6","8:6.9.7.4+dfsg-11+deb9u7","8:6.9.7.4+dfsg-11+deb9u8","8:6.9.7.4+dfsg-11+deb9u9"],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.26.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.78.22.1"}]}],"bundled":31}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/commit/e5c063a1007506ba69e97a35effcdef944421c89","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870019","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/598","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13658"},{"url":"https://github.com/advisories/GHSA-6m75-6pmc-2r2r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-13658","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180130-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047044","tags":["report"]},{"url":"https://bugzilla.suse.com/1047898","tags":["report"]},{"url":"https://bugzilla.suse.com/1050120","tags":["report"]},{"url":"https://bugzilla.suse.com/1050606","tags":["report"]},{"url":"https://bugzilla.suse.com/1051446","tags":["report"]},{"url":"https://bugzilla.suse.com/1052468","tags":["report"]},{"url":"https://bugzilla.suse.com/1052550","tags":["report"]},{"url":"https://bugzilla.suse.com/1052710","tags":["report"]},{"url":"https://bugzilla.suse.com/1052720","tags":["report"]},{"url":"https://bugzilla.suse.com/1052731","tags":["report"]},{"url":"https://bugzilla.suse.com/1052732","tags":["report"]},{"url":"https://bugzilla.suse.com/1055065","tags":["report"]},{"url":"https://bugzilla.suse.com/1055323","tags":["report"]},{"url":"https://bugzilla.suse.com/1055434","tags":["report"]},{"url":"https://bugzilla.suse.com/1055855","tags":["report"]},{"url":"https://bugzilla.suse.com/1058640","tags":["report"]},{"url":"https://bugzilla.suse.com/1059751","tags":["report"]},{"url":"https://bugzilla.suse.com/1074123","tags":["report"]},{"url":"https://bugzilla.suse.com/1074969","tags":["report"]},{"url":"https://bugzilla.suse.com/1074973","tags":["report"]},{"url":"https://bugzilla.suse.com/1074975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12675","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13658","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14326","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5247","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180132-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1042948","tags":["report"]},{"url":"https://bugzilla.suse.com/1049373","tags":["report"]},{"url":"https://bugzilla.suse.com/1051412","tags":["report"]},{"url":"https://bugzilla.suse.com/1052252","tags":["report"]},{"url":"https://bugzilla.suse.com/1052771","tags":["report"]},{"url":"https://bugzilla.suse.com/1058082","tags":["report"]},{"url":"https://bugzilla.suse.com/1072902","tags":["report"]},{"url":"https://bugzilla.suse.com/1074122","tags":["report"]},{"url":"https://bugzilla.suse.com/1074425","tags":["report"]},{"url":"https://bugzilla.suse.com/1074610","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14249","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9409","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-13658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-13658","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-13658","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"published","published":"2017-08-24T06:00:00Z","modified":"2024-08-05T19:05:19.142Z","updated_at":"2026-11-02T14:33:17.903346Z"}],"euvd":[{"id":"EUVD-2017-5175","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"published","published":"2017-08-24T06:00:00Z","modified":"2024-08-05T19:05:19Z","updated_at":"2026-11-03T02:23:19.185271Z"}],"ghsa":[{"id":"GHSA-6m75-6pmc-2r2r","title":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the...","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"published","published":"2022-05-13T01:17:25Z","modified":"2023-02-01T05:04:59Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:50:12.520785Z"}],"nvd":[{"id":"CVE-2017-13658","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"published","published":"2017-08-24T06:29:00.193Z","modified":"2026-06-17T01:04:56.47Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:03:57.82609Z"}],"osv":[{"id":"CVE-2017-13658","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"published","published":"2017-08-24T06:29:00.193Z","modified":"2026-10-24T14:19:43.683028741Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-13658","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"published","published":"2017-08-24T06:29:00.193Z","modified":"2026-09-01T20:03:43.177323134Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:28.801885Z"},{"id":"UBUNTU-CVE-2017-13658","description":"In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.","status":"withdrawn","published":"2017-08-24T06:29:00Z","modified":"2025-07-16T07:36:00.989138Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DLA-1081-1","title":"imagemagick - security update","status":"published","published":"2017-08-31T00:00:00Z","modified":"2026-03-09T01:01:57.089204Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1785-1","title":"imagemagick - security update","status":"published","published":"2019-05-13T00:00:00Z","modified":"2026-03-09T01:22:33.252689Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DLA-2366-1","title":"imagemagick - security update","status":"published","published":"2020-09-07T00:00:00Z","modified":"2026-03-09T01:21:05.169049Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"SUSE-SU-2018:0130-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-5246: Fixed memory leak vulnerability in ReadPATTERNImage in\n  coders/pattern.c (bsc#1074973)\n- CVE-2017-18022: Fixed memory leak vulnerability in MontageImageCommand in\n  MagickWand/montage.c (bsc#1074975)\n- CVE-2018-5247: Fixed memory leak vulnerability in ReadRLAImage in\n  coders/rla.c (bsc#1074969)\n- CVE-2017-12672: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service (bsc#1052720)\n- CVE-2017-13060: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service via a crafted file (bsc#1055065)\n- CVE-2017-11724: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c involving the quantum_info and clone_info\n  data structures (bsc#1051446)\n- CVE-2017-12670: Added validation in coders/mat.c to prevent an assertion\n  failure in the function DestroyImage in MagickCore/image.c, which\n  allowed attackers to cause a denial of service (bsc#1052731)\n- CVE-2017-12667: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1052732)\n- CVE-2017-13146: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055323)\n- CVE-2017-10800: Processing MATLAB images in coders/mat.c could have lead to a\n  denial of service (OOM) in ReadMATImage() if the size specified for a\n  MAT Object was larger than the actual amount of data (bsc#1047044)\n- CVE-2017-13648: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055434)\n- CVE-2017-11141: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders\\mat.c that could have caused memory exhaustion\n  via a crafted MAT file, related to incorrect ordering of a\n  SetImageExtent call (bsc#1047898)\n- CVE-2017-11529: The ReadMATImage function in coders/mat.c allowed remote\n  attackers to cause a denial of service (memory leak) via a crafted file\n  (bsc#1050120)\n- CVE-2017-12564: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service (bsc#1052468)\n- CVE-2017-12434: Added a missing NULL check in the function ReadMATImage in\n  coders/mat.c, which allowed attackers to cause a denial of service\n  (assertion failure) in DestroyImageInfo in image.c (bsc#1052550)\n- CVE-2017-12675: Added a missing check for multidimensional data coders/mat.c,\n  that could have lead to a memory leak in the function ReadImage in\n  MagickCore/constitute.c, which allowed attackers to cause a denial of\n  service (bsc#1052710)\n- CVE-2017-14326: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial\n  of service via a crafted file (bsc#1058640)\n- CVE-2017-11644: Processesing a crafted file in convert could have lead to a\n  memory leak in the ReadMATImage() function in coders/mat.c\n  (bsc#1050606)\n- CVE-2017-13658: Added a missing NULL check in the ReadMATImage function in\n  coders/mat.c, which could have lead to a denial of service (assertion\n  failure and application exit) in the DestroyImageInfo function in\n  MagickCore/image.c (bsc#1055855)\n- CVE-2017-14533: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1059751)\n- CVE-2017-17881: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted MAT image file (bsc#1074123)\n\n","status":"published","published":"2018-01-18T10:38:47Z","modified":"2025-05-02T04:06:05.935109Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0132-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2017-12672: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service (bsc#1052720).\n- CVE-2017-13060: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted file (bsc#1055065).\n- CVE-2017-11724: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c involving the quantum_info and clone_info data\n  structures (bsc#1051446).\n- CVE-2017-12670: Added validation in coders/mat.c to prevent an assertion\n  failure in the function DestroyImage in MagickCore/image.c, which allowed\n  attackers to cause a denial of service (bsc#1052731).\n- CVE-2017-12667: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1052732).\n- CVE-2017-13146: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055323).\n- CVE-2017-10800: Processing MATLAB images in coders/mat.c could have lead to a\n  denial of service (OOM) in ReadMATImage() if the size specified for a MAT\n  Object was larger than the actual amount of data (bsc#1047044)\n- CVE-2017-13648: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1055434).\n- CVE-2017-11141: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders\\mat.c that could have caused memory exhaustion via a\n  crafted MAT file, related to incorrect ordering of a SetImageExtent call\n  (bsc#1047898).\n- CVE-2017-11529: The ReadMATImage function in coders/mat.c allowed remote\n  attackers to cause a denial of service (memory leak) via a crafted file\n  (bsc#1050120).\n- CVE-2017-12564: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service (bsc#1052468).\n- CVE-2017-12434: Added a missing NULL check in the function ReadMATImage in\n  coders/mat.c, which allowed attackers to cause a denial of service (assertion\n  failure) in DestroyImageInfo in image.c (bsc#1052550).\n- CVE-2017-12675: Added a missing check for multidimensional data coders/mat.c,\n  that could have lead to a memory leak in the function ReadImage in\n  MagickCore/constitute.c, which allowed attackers to cause a denial of service\n  (bsc#1052710).\n- CVE-2017-14326: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted file (bsc#1058640).\n- CVE-2017-11644: Processesing a crafted file in convert could have lead to a\n  memory leak in the ReadMATImage() function in coders/mat.c (bsc#1050606).\n- CVE-2017-13658: Added a missing NULL check in the ReadMATImage function in\n  coders/mat.c, which could have lead to a denial of service (assertion failure\n  and application exit) in the DestroyImageInfo function in MagickCore/image.c\n  (bsc#1055855).\n- CVE-2017-14533: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c (bsc#1059751).\n- CVE-2017-17881: Fixed a memory leak vulnerability in the function\n  ReadMATImage in coders/mat.c, which allowed attackers to cause a denial of\n  service via a crafted MAT image file (bsc#1074123).\n- CVE-2017-1000476: Prevent CPU exhaustion in the function ReadDDSInfo in\n  coders/dds.c, which allowed attackers to cause a denial of service\n  (bsc#1074610).\n- CVE-2017-9409: Fixed a memory leak vulnerability in the function ReadMPCImage\n  in mpc.c, which allowed attackers to cause a denial of service via a crafted\n  file (bsc#1042948).\n- CVE-2017-11449: coders/mpc did not enable seekable streams and thus could not\n  validate blob sizes, which allowed remote attackers to cause a denial of service\n  (application crash) or possibly have unspecified other impact via an image\n  received from stdin (bsc#1049373)\n- CVE-2017-12430: A memory exhaustion in the function ReadMPCImage in\n  coders/mpc.c allowed attackers to cause DoS (bsc#1052252)\n- CVE-2017-12642: Prevent a memory leak vulnerability in ReadMPCImage in\n  coders\\mpc.c via crafted file allowing for DoS (bsc#1052771)\n- CVE-2017-14249: A mishandled EOF check in ReadMPCImage in coders/mpc.c that\n  lead to a division by zero in GetPixelCacheTileSize in MagickCore/cache.c\n  allowed remote attackers to cause a denial of service via a crafted file\n  (bsc#1058082)\n- CVE-2017-1000445: Added a NUL pointer check in the MagickCore component that\n  might have lead to denial of service  (bsc#1074425).\n- CVE-2017-11751: Fixed a memory leak vulnerability in the function\n  WritePICONImage in coders/xpm.c that allowed remote attackers to cause a denial\n  of service via a crafted file (bsc#1051412).\n- CVE-2017-17680: Fixed a memory leak vulnerability in the function\n  ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of\n  service via a crafted xpm image file (bsc#1072902).\n- CVE-2017-17882: Fixed a memory leak vulnerability in the function\n  ReadXPMImage in coders/xpm.c, which allowed attackers to cause a denial of\n  service via a crafted XPM image file (bsc#1074122).\n- CVE-2018-5246: Fixed memory leak vulnerability in ReadPATTERNImage in\n  coders/pattern.c (bsc#1074973).\n- CVE-2017-18022: Fixed memory leak vulnerability in MontageImageCommand in\n  MagickWand/montage.c (bsc#1074975)\n- CVE-2018-5247: Fixed memory leak vulnerability in ReadRLAImage in\n  coders/rla.c (bsc#1074969)\n","status":"published","published":"2018-01-18T10:37:33Z","modified":"2025-05-02T04:06:01.279269Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}