CVE-2017-13147: Graphicsmagick

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value.

Affected products

• Graphicsmagick Graphicsmagick: version 1.3.26 only

Published 2017-08-23. Last modified 2026-06-17.