CVE-2017-12671

In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service.

• CWE-416

• https://github.com/ImageMagick/ImageMagick/issues/621Issue Tracking, Patch, Third Party Advisory
• https://www.debian.org/security/2017/dsa-4019
• https://github.com/ImageMagick/ImageMagick/issues/621Issue Tracking, Patch, Third Party Advisory
• https://www.debian.org/security/2017/dsa-4019

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12666ImageMagick 7.0.6-2 has a memory leak vulnerability in Write…8.8
• CVE-2017-12667ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadM…8.8
• CVE-2017-12668ImageMagick 7.0.6-2 has a memory leak vulnerability in Write…8.8
• CVE-2017-12669ImageMagick 7.0.6-2 has a memory leak vulnerability in Write…8.8
• CVE-2017-1267IBM Security Guardium 10.0 and 10.1 processes patches, image…
• CVE-2017-12670In ImageMagick 7.0.6-3, missing validation was found in code…
• CVE-2017-12672In ImageMagick 7.0.6-3, a memory leak vulnerability was foun…
• CVE-2017-12673In ImageMagick 7.0.6-3, a memory leak vulnerability was foun…
• CVE-2017-12674In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was f…
• CVE-2017-12675In ImageMagick 7.0.6-3, a missing check for multidimensional…
• CVE-2017-12676In ImageMagick 7.0.6-3, a memory leak vulnerability was foun…
• CVE-2017-12677IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS…