Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

ImageMagick can run out of memory on certain images

CVE-2017-12418 · published 9 years ago
Summary

Version 7.0.6-5 of ImageMagick does not release memory properly when handling some image metadata, which can cause the application to consume excessive memory and possibly stop working. This affects any system that uses ImageMagick to process images. Update ImageMagick to the latest release or apply the vendor's patch to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
imagemagick imagemagick 7.0.6-5
cpe:2.3:a:imagemagick:imagemagick:7.0.6-5:*:*:*:*:*:*:*
Original advisory text
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.
ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
3% chance of attack within 30 days
Type
CWE-772Missing Release of Resource after Effective Lifetime
Timeline
Published4 Aug 2017
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2017-12418 · NVD
Track software like this
Free during beta