CVE-2017-14504

ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference.

• CWE-476

• http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=fb09ca6dd22c
• http://www.securityfocus.com/bid/100877Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
• https://sourceforge.net/p/graphicsmagick/bugs/465/Issue Tracking, Patch, Third Party Advisory
• https://sourceforge.net/p/graphicsmagick/bugs/466/Issue Tracking, Patch, Third Party Advisory
• https://usn.ubuntu.com/4232-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory
• http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=fb09ca6dd22c
• http://www.securityfocus.com/bid/100877Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
• https://sourceforge.net/p/graphicsmagick/bugs/465/Issue Tracking, Patch, Third Party Advisory
• https://sourceforge.net/p/graphicsmagick/bugs/466/Issue Tracking, Patch, Third Party Advisory
• https://usn.ubuntu.com/4232-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory

Published

Sep 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14498SilverStripe CMS before 3.6.1 has XSS via an SVG document th…
• CVE-2017-1450IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote atta…
• CVE-2017-14500Improper Neutralization of Special Elements used in an OS Co…
• CVE-2017-14501An out-of-bounds read flaw exists in parse_file_info in arch…
• CVE-2017-14502read_header in archive_read_support_format_rar.c in libarchi…
• CVE-2017-14503libarchive 3.3.2 suffers from an out-of-bounds read within l…
• CVE-2017-14505DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick…
• CVE-2017-14506geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demon…5.4
• CVE-2017-14507Multiple SQL injection vulnerabilities in the Content Timeli…
• CVE-2017-14508An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x be…
• CVE-2017-14509An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x be…
• CVE-2017-1451IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.…