CVE-2017-13146

high-risk
Published 2017-08-23

In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.

Do I need to act?

-
0.46% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

Imagemagick

References (6)

Issue Tracking https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870013
Patch https://github.com/ImageMagick/ImageMagick/commit/79e5dbcdd1fc2f714f9bae548bc55d...
Third Party Advisory https://security.gentoo.org/glsa/201711-07
Issue Tracking https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=870013
Patch https://github.com/ImageMagick/ImageMagick/commit/79e5dbcdd1fc2f714f9bae548bc55d...
Third Party Advisory https://security.gentoo.org/glsa/201711-07
57
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 2/34 · Minimal
Exposure 25/34 · High