CVE-2017-17500

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file.

• CWE-125

• http://hg.code.sf.net/p/graphicsmagick/code/rev/1366f2dd9931Patch, Third Party Advisory
• http://www.securityfocus.com/bid/102164Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2018/01/msg00005.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/06/msg00009.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
• https://sourceforge.net/p/graphicsmagick/bugs/523/Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4248-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory
• http://hg.code.sf.net/p/graphicsmagick/code/rev/1366f2dd9931Patch, Third Party Advisory
• http://www.securityfocus.com/bid/102164Third Party Advisory, VDB Entry
• https://lists.debian.org/debian-lts-announce/2018/01/msg00005.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/06/msg00009.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PF62B5PJA2JDUOCKJGUQO3SPL74BEYSV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WHIKB4TP6KBJWT2UIPWL5MWMG5QXKGEJ/
• https://sourceforge.net/p/graphicsmagick/bugs/523/Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4248-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory

Published

Dec 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1749IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remot…5.3
• CVE-2017-17496Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-17497In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.…7.5
• CVE-2017-17498WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allow…
• CVE-2017-17499ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a us…9.8
• CVE-2017-1750IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 t…
• CVE-2017-17501WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 ha…
• CVE-2017-17502ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has …
• CVE-2017-17503ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has …
• CVE-2017-17504ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_re…6.5
• CVE-2017-17505In HDF5 1.10.1, there is a NULL pointer dereference in the f…
• CVE-2017-17506In HDF5 1.10.1, there is an out of bounds read vulnerability…6.5