CVE-2017-18230

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file.

• CWE-476

• http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/53a4d841e90fPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/03/msg00025.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://sourceforge.net/p/graphicsmagick/bugs/473/Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4266-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory
• http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/53a4d841e90fPatch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/03/msg00025.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://sourceforge.net/p/graphicsmagick/bugs/473/Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4266-1/
• https://www.debian.org/security/2018/dsa-4321Third Party Advisory

Published

Mar 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18225The Gentoo net-im/jabberd2 package through 2.6.1 installs ja…
• CVE-2017-18226The Gentoo net-im/jabberd2 package through 2.6.1 sets the ow…
• CVE-2017-18227TitanHQ WebTitan Gateway has incorrect certificate validatio…
• CVE-2017-18228Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via t…
• CVE-2017-18229An issue was discovered in GraphicsMagick 1.3.26. An allocat…
• CVE-2017-1823Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18231An issue was discovered in GraphicsMagick 1.3.26. A NULL poi…
• CVE-2017-18232The Serial Attached SCSI (SAS) implementation in the Linux k…
• CVE-2017-18233An issue was discovered in Exempi before 2.4.4. Integer over…
• CVE-2017-18234An issue was discovered in Exempi before 2.4.3. It allows re…
• CVE-2017-18235An issue was discovered in Exempi before 2.4.3. The VPXChunk…
• CVE-2017-18236An issue was discovered in Exempi before 2.4.4. The ASF_Supp…