CVE-2017-14138

Critical

Published: 04/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

ImageMagick version 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

Risk Assessment

Memory leaks can lead to increased resource consumption, which may ultimately affect the stability and performance of applications using ImageMagick.

Recommendation

It is recommended to update ImageMagick to the latest version to mitigate this vulnerability and to monitor applications for any abnormal behavior.

Original NVD description (English source)

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.