CVE-2017-9142

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.0"
                },
                {
                    "last_affected": "8.0"
                },
                {
                    "introduced": "9.0"
                },
                {
                    "last_affected": "9.0"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "debian:debian_linux",
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type

GIT

Repo

https://github.com/imagemagick/imagemagick

Events

Introduced

fa77e72e38dfb86bc40894fd11459c43dc7631d8

Last affected

fa77e72e38dfb86bc40894fd11459c43dc7631d8

Fixed

f0232a2a45dfd003c1faf6079497895df3ab0ee1

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "7.0.5-7"
        },
        {
            "last_affected": "7.0.5-7"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*"
}

Affected versions

7.*

7.0.5-7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9142.json"

vanir_signatures

[
    {
        "target": {
            "function": "ReadOneJNGImage",
            "file": "coders/png.c"
        },
        "deprecated": false,
        "source": "https://github.com/imagemagick/imagemagick/commit/f0232a2a45dfd003c1faf6079497895df3ab0ee1",
        "id": "CVE-2017-9142-244169d5",
        "signature_version": "v1",
        "digest": {
            "length": 13944.0,
            "function_hash": "10685912637953292967486052057510858512"
        },
        "signature_type": "Function"
    },
    {
        "target": {
            "file": "coders/png.c"
        },
        "deprecated": false,
        "source": "https://github.com/imagemagick/imagemagick/commit/f0232a2a45dfd003c1faf6079497895df3ab0ee1",
        "id": "CVE-2017-9142-f5812a24",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "55354417517607064168098092458754790588",
                "164047965787487540201063060851091045772",
                "303364345114828104705308682115659084046",
                "179387021110365750541732828470146625576",
                "294720302399277623319787137900643143319",
                "24882106847455866198505122312345103341"
            ]
        },
        "signature_type": "Line"
    }
]

vanir_signatures_modified

"2026-08-07T14:53:47Z"