CVE-2017-14505

DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input.

• CWE-476

• http://www.securityfocus.com/bid/100882
• https://github.com/ImageMagick/ImageMagick/issues/716Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
• https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
• https://usn.ubuntu.com/3681-1/
• http://www.securityfocus.com/bid/100882
• https://github.com/ImageMagick/ImageMagick/issues/716Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
• https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
• https://usn.ubuntu.com/3681-1/

Published

Sep 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1450IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote atta…
• CVE-2017-14500Improper Neutralization of Special Elements used in an OS Co…
• CVE-2017-14501An out-of-bounds read flaw exists in parse_file_info in arch…
• CVE-2017-14502read_header in archive_read_support_format_rar.c in libarchi…
• CVE-2017-14503libarchive 3.3.2 suffers from an out-of-bounds read within l…
• CVE-2017-14504ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does n…
• CVE-2017-14506geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demon…5.4
• CVE-2017-14507Multiple SQL injection vulnerabilities in the Content Timeli…
• CVE-2017-14508An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x be…
• CVE-2017-14509An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x be…
• CVE-2017-1451IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.…
• CVE-2017-14510An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x be…