{"id":"CVE-2017-11310","details":"The read_user_chunk_callback function in coders\\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.","modified":"2026-08-07T14:48:39.235738Z","published":"2017-07-13T18:29:00.230Z","references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/99585"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/issues/517"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"9871b4ad7400606bbecf7f979b198080f4b107c3"},{"last_affected":"9871b4ad7400606bbecf7f979b198080f4b107c3"},{"fixed":"8ca35831e91c3db8c6d281d09b605001003bec08"}],"database_specific":{"extracted_events":[{"introduced":"7.0.6-1"},{"last_affected":"7.0.6-1"}],"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*"}}],"versions":["7.0.6-1"],"database_specific":{"vanir_signatures_modified":"2026-08-07T14:48:39Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"285510889801515795676346004583712672890","length":2826},"id":"CVE-2017-11310-29c76cad","signature_type":"Function","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08","target":{"file":"coders/png.c","function":"read_user_chunk_callback"}},{"deprecated":false,"digest":{"line_hashes":["103383565405778119546699301311608172628","213708066535198639185349125419021289616","74358091257952561007784820209546298695","102566815546433902396374771941292024764","282950824787450393717630739060872712129","228213391161026575289098591687672950155","269118301491509944162313369817501718774","256563918348567238463216908896524256022","144254455047936680293701464703170601299"],"threshold":0.9},"id":"CVE-2017-11310-3989e734","signature_type":"Line","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08","target":{"file":"coders/png.c"}},{"deprecated":false,"digest":{"function_hash":"98342463958135093389130932634154434970","length":40632},"id":"CVE-2017-11310-91c03f31","signature_type":"Function","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/8ca35831e91c3db8c6d281d09b605001003bec08","target":{"file":"coders/png.c","function":"ReadOnePNGImage"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-11310.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}