CVE-2017-11170

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-6

Description The issue is related to a memory leak in the ReadTGAImage function, located in coderstga.c, which can lead to memory exhaustion. This occurs when the function encounters invalid colors data in the header of a TGA or VST file.

Recommendations For ImageMagick version 7.0.5-6, consider updating to a newer version that addresses the memory leak issue in the ReadTGAImage function. As a temporary workaround, restrict the processing of TGA and VST files to minimize the risk of memory exhaustion.