In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "7.0.1-0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-2"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-3"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-7"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-8"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-9"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.1-10"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-2"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-3"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-7"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-8"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-9"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.2-10"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-2"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-3"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-7"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-8"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-9"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.3-10"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-2"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-3"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-7"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-8"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-9"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.4-10"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-4"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-5"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-6"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-7"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-8"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-9"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.5-10"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.6-0"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.6-1"
},
{
"introduced": "0"
},
{
"last_affected": "7.0.6-2"
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-13658.json"
[
{
"signature_version": "v1",
"target": {
"file": "coders/mat.c",
"function": "ReadMATImage"
},
"source": "https://github.com/imagemagick/imagemagick/commit/e5c063a1007506ba69e97a35effcdef944421c89",
"deprecated": false,
"digest": {
"function_hash": "293712838801584744090017267013273637519",
"length": 11829.0
},
"id": "CVE-2017-13658-59c036bf",
"signature_type": "Function"
},
{
"signature_version": "v1",
"target": {
"file": "coders/mat.c"
},
"source": "https://github.com/imagemagick/imagemagick/commit/e5c063a1007506ba69e97a35effcdef944421c89",
"deprecated": false,
"digest": {
"line_hashes": [
"196372200781272399580337409078976674031",
"150586695525905005355183413701924109268",
"10433274608074049300448930201816478828",
"297997508868761914743686034058668692117"
],
"threshold": 0.9
},
"id": "CVE-2017-13658-a57e7ea9",
"signature_type": "Line"
}
]