{"id":"CVE-2017-9144","details":"In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.","modified":"2026-08-07T14:59:23.016237Z","published":"2017-05-22T14:29:00.387Z","related":["SUSE-SU-2017:1489-1","SUSE-SU-2017:1599-1","SUSE-SU-2017:1600-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"}]},"references":[{"type":"ADVISORY","url":"http://www.debian.org/security/2017/dsa-3863"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/98603"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/f6240ee77847787f6d7618b669d3a2040a2d6d40"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"f1208a9c0b5abcea0dab90d1cd60435265e529bd"},{"last_affected":"f1208a9c0b5abcea0dab90d1cd60435265e529bd"},{"fixed":"f6240ee77847787f6d7618b669d3a2040a2d6d40"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.0.5-5"},{"last_affected":"7.0.5-5"}]}}],"versions":["7.0.5-5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9144.json","vanir_signatures_modified":"2026-08-07T14:59:23Z","vanir_signatures":[{"target":{"file":"coders/rle.c"},"deprecated":false,"digest":{"line_hashes":["245313225001170332104170156635750749946","2715447564499511875398110413324807474","57715714534827879251535601085509081252","258651753632070878870841798926878846494","333544368184070053010906853747200450064","333276916013171088666643621903582157888","259910642101951857374455098010540235911","167022139893941037330581873263885542766","270322728588086259614614528575154018692","231981191946529199820117434416124563197","248881734972614941836028296952086717580","175300867465846461648275802293275660855","136545751570837995857938499844411410433","65838235248001948846626787767146108258","318637194682597330509215309820265141495","131879198355232054250029038376047920517","310448143261891848854757088995615722739","190946206961819545839351839199833023037","261263467045881034837146025141308199337","131971478152723688535838292203223400627","306050479175140642205616603392697598287","156724708982705357564663792797641458440","23380692874001204338750631602925000199","302011346689985164745294783398903896674","182658376792404770610512116055523383270","170332867245944674876172964798665841097","6362944173681929492983785245422070399","56361959335563747699000113482247887892","6712839645474271494620898380701109240","252313576587341317415441139005018819879","117056892178513044662407328892416459813","42298114491589519464969453743543044172","190946206961819545839351839199833023037","261263467045881034837146025141308199337","131971478152723688535838292203223400627","288266548473625984802000636820098271935","199926029188741517236595749813081081376","30947904900441035358072037530787739733","261345797608526014971565190975756046682","292322576661720492163207582516882911161","205461958908692913770389882202625139458","36107433435778734065472403573924899802","290840983470177328106733070169039928991","199587900100131371357247305526784481566","176714729570876141443894410335792100729","262434926091091411491294168695217323355","196547376700279808253727986066349348151","190762798833776860154277894613206995951","23094059844303982080683788405997072034","336955392005557691685915128825903395024","29490542718911143732106549170825389322","172492230760187119529083292563230179169","119701206724909456615168682845081304355","278525732516949296663919065239605514128","176714729570876141443894410335792100729","197703781973381643261472613245762402362","134688536800727138186017553237502495599","292626630507648736882352354212788453748","265773511348559316553987868129431141206","317806991865429325097333683720368076972","193289428897953860896730605078943844361","151436312336781718862515344028615067090","176714729570876141443894410335792100729","241070892852157862468970065725552328927","242346636559513463005132324218302935149","220359834407145728483318062160484588111","191442826948943868227088804551874306582","229440692837201811356569440962534222971","129276675754450598609281947807418069963","290360771464454773217968806417869951038","324718990127423714623304184531404592357","140738219054650612594458137441704828297","303398727533686742983308195573841507648","176714729570876141443894410335792100729","211464101302679361212520831825504025204","109212738222713678375525154519239187735","206763388730426287709883786074153260777","154749866978352168385819459257825762347","258549396968445072106436885992383446478","191442826948943868227088804551874306582","229440692837201811356569440962534222971","129276675754450598609281947807418069963","290360771464454773217968806417869951038","324718990127423714623304184531404592357","217678671937524877736750047396578228149","176706061980215219933802243025734711702","52861588544669234819935200000437592262","131914528749446702243173096567232988354","320320710547404002564762508217618832260","19032714601718500612938108421311534969","171387545159509940624120258497284546552","91788949689948432472441628313511155232","174378775369449536673742447081181388488","320633118101193337825346796828769696031","245230827653999654332237370217900110573","180305107698906380886972162568873170986","44178850642753478982557465829335764343","26272647191538042580996279320987857376","77715664280999955566595629393969710297","42507487132472233772251890779201757874"],"threshold":0.9},"id":"CVE-2017-9144-72250fe7","signature_type":"Line","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/f6240ee77847787f6d7618b669d3a2040a2d6d40"},{"deprecated":false,"digest":{"function_hash":"41210600969995582835514364617456564587","length":11062},"id":"CVE-2017-9144-d973c7ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/f6240ee77847787f6d7618b669d3a2040a2d6d40","target":{"file":"coders/rle.c","function":"ReadRLEImage"}}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}