Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2017-12642: ImageMagick memory leak in MPC image handling
CVE-2017-12642 · published 9 years ago
Summary
A memory leak in ImageMagick can cause it to consume increasing amounts of memory, potentially leading to crashes or slowdowns. This issue affects users who process Multi-Purpose Content (MPC) images using ImageMagick. To mitigate the risk, update to the latest version of ImageMagick.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | imagemagick | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | imagemagick | All versions |
| – | imagemagick | imagemagick |
7.0.6-1 cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:* |
Original advisory text
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.
References
- https://ubuntu.com/security/CVE-2017-12642 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2017-12642 Third Party Advisory
- http://www.securityfocus.com/bid/100159
- https://github.com/ImageMagick/ImageMagick/issues/552 Issue Tracking Patch Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-772Missing Release of Resource after Effective Lifetime
Timeline
Published7 Aug 2017
Updated4 Nov 2026
First seen24 Jun 2026
Track software like this
Free during beta