Skip to main content

NULL Pointer Dereference

CVE-2017-18209

High
8.8/10

Summary

In the GetOpenCLCachedFilesDirectory function in "magick/opencl.c" in ImageMagick 6.x before 6.9.9-17 and 7.x before 7.0.7-5, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published