CVE-2017-14042: Graphicsmagick

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memory allocation, which may lead to remote denial of service in the MagickRealloc function in magick/memory.c.

Affected products

• Graphicsmagick Graphicsmagick: version 1.3.26 only

Published 2017-08-30. Last modified 2026-06-17.