CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-09-04

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Imagemagick (Imagemagick)

References

• https://github.com/ImageMagick/ImageMagick/issues/641
• https://security.gentoo.org/glsa/201711-07