CVE-2017-13776

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it.

• CWE-834

• http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5eIssue Tracking, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2017/08/31/2Exploit, Mailing List
• http://www.securityfocus.com/bid/100574Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4222-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory
• http://hg.code.sf.net/p/graphicsmagick/code/rev/233a720bfd5eIssue Tracking, Patch, Third Party Advisory
• http://openwall.com/lists/oss-security/2017/08/31/2Exploit, Mailing List
• http://www.securityfocus.com/bid/100574Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://usn.ubuntu.com/4222-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory

Published

Aug 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13769The WriteTHUMBNAILImage function in coders/thumbnail.c in Im…6.5
• CVE-2017-1377IBM Runbook Automation reveals sensitive information in erro…
• CVE-2017-13771Lexmark Scan To Network (SNF) 3.2.9 and earlier stores netwo…
• CVE-2017-13772Multiple stack-based buffer overflows in TP-Link WR940N WiFi…
• CVE-2017-13774Hikvision iVMS-4200 devices before v2.6.2.7 allow local user…
• CVE-2017-13775GraphicsMagick 1.3.26 has a denial of service issue in ReadJ…
• CVE-2017-13777GraphicsMagick 1.3.26 has a denial of service issue in ReadX…
• CVE-2017-13778Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.p…
• CVE-2017-13779GSTN_offline_tool in India Goods and Services Tax Network (G…7.8
• CVE-2017-1378IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Ma…
• CVE-2017-13780The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows di…
• CVE-2017-13782An issue was discovered in certain Apple products. macOS bef…