CVE-2017-13658

ImageMagick: Missing NULL check in the ReadMATImage function

Published Aug 24, 2017 CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Description
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1081-1 imagemagick security update
Debian DLA Debian DLA DLA-1785-1 imagemagick security update
Debian DLA Debian DLA DLA-2366-1 imagemagick security update
EUVD EUVD EUVD-2017-5175 In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 5, 2024, 7:05 PM
Reserved
Aug 23, 2017, 12:00 AM
Status
Modified
Published
Aug 24, 2017, 6:29 AM
Modified
Jun 17, 2026, 1:04 AM
Severity
Low
Public date
Jul 23, 2017, 12:00 AM