Back
CVE-2017-14625
CRITICAL
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
Published: Sep 21, 2017
Modified: Jun 17, 2026
CWE-476
CVSS Metrics
CVSSv3
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products (5)
| Vendor | Product | Version |
|---|---|---|
| imagemagick | imagemagick | 7.0.7-0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 17.10 |
| canonical | ubuntu_linux | 18.04 |
GitHub Security Advisory GHSA-826w-c3xh-9h43
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function...
References (10)
- http://www.securityfocus.com/bid/100941 Third Party Advisory, VDB Entry
- https://github.com/ImageMagick/ImageMagick/issues/721 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
- https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
- https://usn.ubuntu.com/3681-1/ Third Party Advisory
- http://www.securityfocus.com/bid/100941 Third Party Advisory, VDB Entry
- https://github.com/ImageMagick/ImageMagick/issues/721 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
- https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
- https://usn.ubuntu.com/3681-1/ Third Party Advisory
Risk Scores
CVSS Score
9.8 / 10
EPSS Score
3.18%
Top 13% most likely to be exploited
Threat Score
40.2 / 100
Data Sources
NVD
EPSS
GitHub