CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.

• CWE-908

• http://hg.code.sf.net/p/graphicsmagick/code/diff/0a5b75e019b6/coders/rle.cPatch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3863Third Party Advisory
• http://www.securityfocus.com/bid/98593Third Party Advisory, VDB Entry
• https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849bPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.htmlExploit, Technical Description, Third Party Advisory
• http://hg.code.sf.net/p/graphicsmagick/code/diff/0a5b75e019b6/coders/rle.cPatch, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3863Third Party Advisory
• http://www.securityfocus.com/bid/98593Third Party Advisory, VDB Entry
• https://github.com/ImageMagick/ImageMagick/commit/1c358ffe0049f768dd49a8a889c1cbf99ac9849bPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/08/msg00002.htmlMailing List, Third Party Advisory
• https://scarybeastsecurity.blogspot.com/2017/05/bleed-continues-18-byte-file-14k-bounty.htmlExploit, Technical Description, Third Party Advisory

Published

May 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9091/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($…
• CVE-2017-9093The my_skip_input_data_fn function in imagew-jpeg.c in libim…
• CVE-2017-9094The lzw_add_to_dict function in imagew-gif.c in libimagewors…
• CVE-2017-9095XXE in Diving Log 6.0 allows attackers to remotely view loca…5.5
• CVE-2017-9096The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 …
• CVE-2017-9097In Anti-Web through 3.8.7, as used on NetBiter FGW200 device…
• CVE-2017-9100login.cgi on D-Link DIR-600M devices with firmware 3.04 allo…8.8
• CVE-2017-9101import.php (aka the Phonebook import feature) in PlaySMS 1.4…
• CVE-2017-9103An issue was discovered in adns before 1.5.2. pap_mailbox822…9.8
• CVE-2017-9104An issue was discovered in adns before 1.5.2. It hangs, eati…9.8
• CVE-2017-9105An issue was discovered in adns before 1.5.2. It corrupts a …8.8
• CVE-2017-9106An issue was discovered in adns before 1.5.2. adns_rr_info m…7.5