CVE-2017-14103

The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11403.

• CWE-416

• http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51fIssue Tracking, Patch, Third Party Advisory
• https://blogs.gentoo.org/ago/2017/09/01/graphicsmagick-use-after-free-in-closeblob-blob-c-incomplete-fix-for-cve-2017-11403/Patch, Third Party Advisory, VDB Entry
• http://hg.code.sf.net/p/graphicsmagick/code/rev/98721124e51fIssue Tracking, Patch, Third Party Advisory
• https://blogs.gentoo.org/ago/2017/09/01/graphicsmagick-use-after-free-in-closeblob-blob-c-incomplete-fix-for-cve-2017-11403/Patch, Third Party Advisory, VDB Entry

Published

Sep 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14097An improper access control vulnerability in Trend Micro Smar…
• CVE-2017-14098In the pjsip channel driver (res_pjsip) in Asterisk 13.x bef…
• CVE-2017-14099In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 1…
• CVE-2017-14100In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14…
• CVE-2017-14101A security researcher found an XML External Entity (XXE) vul…
• CVE-2017-14102MIMEDefang 2.80 and earlier creates a PID file after droppin…
• CVE-2017-14105HiveManager Classic through 8.1r1 allows arbitrary JSP code …
• CVE-2017-14106The tcp_disconnect function in net/ipv4/tcp.c in the Linux k…
• CVE-2017-14107The _zip_read_eocd64 function in zip_open.c in libzip before…6.5
• CVE-2017-14108libgedit.a in GNOME gedit through 3.22.1 allows remote attac…
• CVE-2017-1411IBM Security Identity Governance Virtual Appliance 5.2 throu…5.9
• CVE-2017-14111The workstation logging function in Philips IntelliSpace Car…