CVE-2017-13145

In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a…

published August 23, 2017

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01567 · 75.1th percentile
Published
2017-08-23T06:00Z
EPSS history
Timeline
  • 23 AUG 06:00Z
    In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a…
    cvelistv5