CVE-2017-18254

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file.

• CWE-772

• https://github.com/ImageMagick/ImageMagick/issues/808Issue Tracking, Patch
• https://usn.ubuntu.com/3681-1/Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/808Issue Tracking, Patch
• https://usn.ubuntu.com/3681-1/Third Party Advisory

Published

Mar 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18249The add_free_nid function in fs/f2fs/node.c in the Linux ker…
• CVE-2017-1825Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18250An issue was discovered in ImageMagick 7.0.7. A NULL pointer…
• CVE-2017-18251An issue was discovered in ImageMagick 7.0.7. A memory leak …
• CVE-2017-18252An issue was discovered in ImageMagick 7.0.7. The MogrifyIma…
• CVE-2017-18253An issue was discovered in ImageMagick 7.0.7. A NULL pointer…
• CVE-2017-18255The perf_cpu_time_max_percent_handler function in kernel/eve…
• CVE-2017-18256Brave Browser before 0.13.0 allows remote attackers to cause…
• CVE-2017-18257The __get_data_block function in fs/f2fs/data.c in the Linux…
• CVE-2017-18258The xz_head function in xzlib.c in libxml2 before 2.9.6 allo…
• CVE-2017-18259Dolibarr ERP/CRM is affected by stored Cross-Site Scripting …
• CVE-2017-1826Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…