CVE-2017-11522

2017-07-2221:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

CPENameOperatorVersion
imagemagickeq7.0.3-0
imagemagickeq7.0.4-2
imagemagickeq6.9.4-3
imagemagickeq6.9.4-4
imagemagickeq7.0.5-10
imagemagickeq6.9.4-5
imagemagickeq6.9.5-7
imagemagickeq7.0.4-0
imagemagickeq7.0.1-4
imagemagickeq6.9.5-6

Name	Operator	Version
imagemagick	eq	7.0.3-0
imagemagick	eq	7.0.4-2
imagemagick	eq	6.9.4-3
imagemagick	eq	6.9.4-4
imagemagick	eq	7.0.5-10
imagemagick	eq	6.9.4-5
imagemagick	eq	6.9.5-7
imagemagick	eq	7.0.4-0
imagemagick	eq	7.0.1-4
imagemagick	eq	6.9.5-6