CVE-2017-11403

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file

published July 18, 2017

CVSS
—
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.28310 · 98.1th percentile
Published
2017-07-18T00:00Z
EPSS history
Timeline
  • 18 JUL 00:00Z
    The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted file
    cvelistv5