CVE-2017-16546
HIGH
8.8
CVSS Severity Score
Vulnerability Description
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.
Affected Platforms (CPE)
📦
Imagemagick
Imagemagick
= 7.0.7-9💻
Canonical
Ubuntu Linux
= 14.04💻
Canonical
Ubuntu Linux
= 16.04💻
Canonical
Ubuntu Linux
= 17.10💻
Canonical
Ubuntu Linux
= 18.04💻
Debian
Debian Linux
= 8.0💻
Debian