CVE-2017-18210 In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ImageMagick | = 7.0.7-0 | No fix listed |
| ImageMagick | = 7.0.7-1 | No fix listed |
| ImageMagick | = 7.0.7-2 | No fix listed |
| ImageMagick | = 7.0.7-3 | No fix listed |
| ImageMagick | = 7.0.7-4 | No fix listed |
| ImageMagick | = 7.0.7-5 | No fix listed |
| ImageMagick | = 7.0.7-6 | No fix listed |
| ImageMagick | = 7.0.7-8 | No fix listed |
| ImageMagick | = 7.0.7-9 | No fix listed |
| ImageMagick | = 7.0.7-10 | No fix listed |
| ImageMagick | = 7.0.7-11 | No fix listed |
| ImageMagick | = 7.0.7-12 | No fix listed |
| ImageMagick | = 7.0.7-13 | No fix listed |
| ImageMagick | = 7.0.7-14 | No fix listed |
| ImageMagick | = 7.0.7-15 | No fix listed |
| ImageMagick | = 7.0.7-16 | No fix listed |
| ImageMagick | = 7.0.7-17 | No fix listed |
| ImageMagick | = 7.0.7-18 | No fix listed |
| ImageMagick | = 7.0.7-19 | No fix listed |
| ImageMagick | = 7.0.7-20 | No fix listed |
| ImageMagick | = 7.0.7-21 | No fix listed |
| ImageMagick | = 7.0.7-22 | No fix listed |
| ImageMagick | = 7.0.7-23 | No fix listed |
| ImageMagick | = 7.0.7-24 | No fix listed |
| ImageMagick | = 7.0.7-25 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ImageMagick | = 7.0.7.7 | No fix listed |
References
- 103212 third-party-advisory vdb-entry
- github.com patch third-party-advisory
- Debian Security Tracker CVE-2017-18210 vendor-advisory