VULNERABILITY INTELLIGENCE

CVE-2017-11170

CVSS score8.8 HIGH
EPSS probability1.68%
CISA KEVNot currently listed
Published2017-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.

Weakness classification

  • CWE-772: Missing Release of Resource after Effective Lifetime

Primary references