CVE-2017-18210

CRITICAL

ImageMagick 7.0.7 - Denial of Service via NULL Pointer Dereference in BenchmarkOpenCLDevices

Title source: llm

Description

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked.

References (2)

Core 2

Core References

Patch, Third Party Advisory x_refsource_misc

https://github.com/ImageMagick/ImageMagick/issues/791

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/103212

Scores

CVSS v3 9.8

EPSS 0.0032

EPSS Percentile 55.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-476

Status published

Products (26)

imagemagick/imagemagick 7.0.7-0

imagemagick/imagemagick 7.0.7-1

imagemagick/imagemagick 7.0.7-2

imagemagick/imagemagick 7.0.7-3

imagemagick/imagemagick 7.0.7-4

imagemagick/imagemagick 7.0.7-5

imagemagick/imagemagick 7.0.7-6

imagemagick/imagemagick 7.0.7-8

imagemagick/imagemagick 7.0.7-9

imagemagick/imagemagick 7.0.7-10

... and 16 more

Published Mar 01, 2018

Tracked Since Feb 18, 2026