CVE-2017-14739

7.5 highEPSS 3.0%

High (7.5) in imagemagick imagemagick. EPSS 3.0% chance of exploitation in the next 30 days.

The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2017-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

imagemagick:imagemagick

References

https://github.com/ImageMagick/ImageMagick/issues/780
https://lists.debian.org/debian-lts-announce/2019/05/msg00015.html
https://lists.debian.org/debian-lts-announce/2020/09/msg00007.html
https://usn.ubuntu.com/3681-1/
https://github.com/ImageMagick/ImageMagick/issues/780

Check your stack JSON