CVE-2017-14042

A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.

• CWE-119

• http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643dIssue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/100556Third Party Advisory, VDB Entry
• https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/Exploit, Patch, Third Party Advisory, VDB Entry
• https://usn.ubuntu.com/4206-1/
• http://hg.code.sf.net/p/graphicsmagick/code/rev/3bbf7a13643dIssue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/100556Third Party Advisory, VDB Entry
• https://blogs.gentoo.org/ago/2017/08/28/graphicsmagick-memory-allocation-failure-in-magickrealloc-memory-c-2/Exploit, Patch, Third Party Advisory, VDB Entry
• https://usn.ubuntu.com/4206-1/

Published

Aug 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14036CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
• CVE-2017-14037CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP heade…
• CVE-2017-14038CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vu…
• CVE-2017-14039A heap-based buffer overflow was discovered in the opj_t2_en…8.8
• CVE-2017-14040An invalid write access was discovered in bin/jp2/convert.c …8.8
• CVE-2017-14041A stack-based buffer overflow was discovered in the pgxtoima…8.8
• CVE-2017-14048BlackCat CMS 1.2 allows remote authenticated users to inject…
• CVE-2017-14049In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php…
• CVE-2017-1405IBM Security Identity Manager Virtual Appliance 7.0 processe…4.4
• CVE-2017-14050In BlackCat CMS 1.2, backend/addons/install.php allows remot…
• CVE-2017-14051An integer overflow in the qla2x00_sysfs_write_optrom_ctl fu…
• CVE-2017-14053NetApp OnCommand Unified Manager for Clustered Data ONTAP be…