CVE-2017-14224

8.8 highEPSS 4.0%

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

imagemagick:imagemagick

References

http://www.securityfocus.com/bid/100702
https://github.com/ImageMagick/ImageMagick/issues/733
https://security.gentoo.org/glsa/201711-07
https://usn.ubuntu.com/3681-1/
https://www.debian.org/security/2017/dsa-4032

Check your stack JSON