Imagemagick · Imagemagick · CVE-2017-14684
**Name of the Vulnerable Software and Affected Versions**
ImageMagick version 7.0.7-4 Q16
**Description**
A memory leak issue was discovered in the ReadVIPSImage function, located in coders/vips.c. This issue can be exploited by attackers using a crafted file, leading to a denial of service due to memory consumption in ResizeMagickMemory in MagickCore/memory.c.
**Recommendations**
For ImageMagick version 7.0.7-4 Q16, as a temporary workaround, consider disabling the ReadVIPSImage function in coders/vips.c until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.