{"schema_version":"1.8.0","id":"CVE-2017-15033","published":"2017-10-05T07:29:00.857Z","modified":"2026-08-07T14:48:58.936917Z","related":["SUSE-SU-2017:2949-1","SUSE-SU-2017:3056-1","SUSE-SU-2017:3168-1"],"details":"ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/imagemagick/imagemagick","events":[{"introduced":"2460488112c34711473f50e16566494155d8e6ef"},{"last_affected":"2460488112c34711473f50e16566494155d8e6ef"},{"fixed":"ef8f40689ac452398026c07da41656a7c87e4683"}],"database_specific":{"cpe":"cpe:2.3:a:imagemagick:imagemagick:7.0.7-2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"7.0.7-2"},{"last_affected":"7.0.7-2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["7.0.7-2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15033.json","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"169868635539950938844850539521910943484","length":9188},"id":"CVE-2017-15033-1618065b","signature_type":"Function","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/ef8f40689ac452398026c07da41656a7c87e4683","target":{"file":"coders/yuv.c","function":"ReadYUVImage"}},{"deprecated":false,"digest":{"line_hashes":["265906765766585707238467327293484144339","275547147662434337144299842564852925100","129574310488402915247186752109697962269","50650824798942913247277633598183358355","130522487602640066982916165731846247893","226541400686478649490130121802393437295","273956067312992774146573536107441566892","224220482244350124408163338941232645877","95244490652658370470624717005237235361","226541400686478649490130121802393437295","273956067312992774146573536107441566892","224220482244350124408163338941232645877","298576260633960406353750693619996584681","226541400686478649490130121802393437295","273956067312992774146573536107441566892","224220482244350124408163338941232645877","157540342433375663493461367247756457711","123390583787146258503285434427276527458","308882363496876183649597486868424813","121152570079141573726650184135405564034","318214642505729518021267632743919080360","202378417035338917965973540571886877000","190680808609450945217181850015408871016","224220482244350124408163338941232645877"],"threshold":0.9},"id":"CVE-2017-15033-8f01abce","signature_type":"Line","signature_version":"v1","source":"https://github.com/imagemagick/imagemagick/commit/ef8f40689ac452398026c07da41656a7c87e4683","target":{"file":"coders/yuv.c"}}],"vanir_signatures_modified":"2026-08-07T14:48:58Z"}}],"references":[{"type":"ADVISORY","url":"https://usn.ubuntu.com/3681-1/"},{"type":"FIX","url":"https://github.com/ImageMagick/ImageMagick/commit/ef8f40689ac452398026c07da41656a7c87e4683"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"],"extracted_events":[{"introduced":"14.04"},{"last_affected":"14.04"},{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"17.10"},{"last_affected":"17.10"},{"introduced":"18.04"},{"last_affected":"18.04"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}