CVE Catalog
CVE-2017-17499
CriticalSummary
ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or application crashes.
Recommendation
It is recommended to update ImageMagick to the latest version to mitigate this vulnerability.
Original NVD description (English source)
ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.