CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.

• CWE-415

• http://hg.code.sf.net/p/graphicsmagick/code/rev/4d0baa77245bIssue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/99504Third Party Advisory, VDB Entry
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory
• http://hg.code.sf.net/p/graphicsmagick/code/rev/4d0baa77245bIssue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/99504Third Party Advisory, VDB Entry
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory

Published

Jul 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11131An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-11132An issue was discovered in heinekingmedia StashCat before 1.…7.5
• CVE-2017-11133An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-11134An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-11135An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-11136An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-1114IBM Campaign 9.1, 9.1.2, and 10 is vulnerable to cross-site …5.4
• CVE-2017-11140The ReadJPEGImage function in coders/jpeg.c in GraphicsMagic…
• CVE-2017-11141The ReadMATImage function in coders\mat.c in ImageMagick 7.0…
• CVE-2017-11142In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.…
• CVE-2017-11143In PHP before 5.6.31, an invalid free in the WDDX deserializ…
• CVE-2017-11144In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.…