CVE-2017-14343

ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.

• CWE-772

• https://github.com/ImageMagick/ImageMagick/issues/649Exploit, Patch, Third Party Advisory
• https://usn.ubuntu.com/3681-1/Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/649Exploit, Patch, Third Party Advisory
• https://usn.ubuntu.com/3681-1/Third Party Advisory

Published

Sep 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14337When MISP before 2.4.80 is configured with X.509 certificate…
• CVE-2017-14339The DNS packet parser in YADIFA before 2.2.6 does not check …
• CVE-2017-1434IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Conne…
• CVE-2017-14340The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the…
• CVE-2017-14341ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWP…6.5
• CVE-2017-14342ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in…
• CVE-2017-14344This vulnerability allows local attackers to escalate privil…
• CVE-2017-14345SQL Injection exists in tianchoy/blog through 2017-09-12 via…
• CVE-2017-14346upload.php in tianchoy/blog through 2017-09-12 allows unrest…
• CVE-2017-14347NexusPHP 1.5.beta5.20120707 has XSS in the returnto paramete…
• CVE-2017-14348LibRaw before 0.18.4 has a heap-based Buffer Overflow in the…
• CVE-2017-14349An authentication vulnerability in HPE SiteScope product ver…