CVE-2017-13139

Critical

Published: 23/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In ImageMagick before version 6.9.9-0 and 7.x before version 7.0.6-1, there is a vulnerability in the ReadOneMNGImage function in coders/png.c that leads to an out-of-bounds read with the MNG CLIP chunk.

Risk Assessment

This vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or application crashes. Organizations should be aware of the potential threats associated with using this version of the software.

Recommendation

It is recommended to update ImageMagick to the latest version to eliminate this vulnerability and minimize security risks.

Original NVD description (English source)

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.