CVE-2017-9142

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "8.0"
                },
                {
                    "last_affected":  "8.0"
                },
                {
                    "introduced":  "9.0"
                },
                {
                    "last_affected":  "9.0"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "debian:debian_linux"
        }
    ]
}

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type

GIT

Repo

https://github.com/imagemagick/imagemagick

Events

Introduced

fa77e72e38dfb86bc40894fd11459c43dc7631d8

Last Affected

fa77e72e38dfb86bc40894fd11459c43dc7631d8

Fixed

f0232a2a45dfd003c1faf6079497895df3ab0ee1

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "7.0.5-7"
        },
        {
            "last_affected":  "7.0.5-7"
        }
    ],
    "source":  [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

7.*

7.0.5-7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9142.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "10685912637953292967486052057510858512",
            "length":  13944
        },
        "id":  "CVE-2017-9142-244169d5",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/imagemagick/imagemagick/commit/f0232a2a45dfd003c1faf6079497895df3ab0ee1",
        "target":  {
            "file":  "coders/png.c",
            "function":  "ReadOneJNGImage"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "55354417517607064168098092458754790588",
                "164047965787487540201063060851091045772",
                "303364345114828104705308682115659084046",
                "179387021110365750541732828470146625576",
                "294720302399277623319787137900643143319",
                "24882106847455866198505122312345103341"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2017-9142-f5812a24",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/imagemagick/imagemagick/commit/f0232a2a45dfd003c1faf6079497895df3ab0ee1",
        "target":  {
            "file":  "coders/png.c"
        }
    }
]

vanir_signatures_modified

"2026-08-07T14:53:47Z"