CVE-2017-11166

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.

• CWE-772

• https://github.com/ImageMagick/ImageMagick/issues/471Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/471Issue Tracking, Patch, Third Party Advisory

Published

Jul 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11160Multiple untrusted search path vulnerabilities in installer …
• CVE-2017-11161Multiple SQL injection vulnerabilities in Synology Photo Sta…
• CVE-2017-11162Directory traversal vulnerability in synphotoio in Synology …
• CVE-2017-11163Cross-site scripting (XSS) vulnerability in aggregate_graphs…
• CVE-2017-11164In PCRE 8.41, the OP_KETRMAX feature in the match function i…
• CVE-2017-11165dataTaker DT80 dEX 1.50.012 allows remote attackers to obtai…9.8
• CVE-2017-11167FineCMS 2.1.0 allows remote attackers to execute arbitrary P…
• CVE-2017-11169Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.…
• CVE-2017-1117IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated us…
• CVE-2017-11170The ReadTGAImage function in coders\tga.c in ImageMagick 7.0…
• CVE-2017-11171Bad reference counting in the context of accept_ice_connecti…
• CVE-2017-11173Missing anchor in generated regex for rack-cors before 0.4.1…8.8