CVE-2017-14989: ImageMagick

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.

Affected products

• ImageMagick ImageMagick: version 7.0.7-4 only

Published 2017-10-03. Last modified 2026-06-17.