CVE-2017-7619: imagemagick Infinite Loop

Vulnerability summary

CVE-2017-7619 is a high (CVSS 7.5) Infinite Loop vulnerability in imagemagick. EPSS estimates a 1.45% chance of exploitation in the next 30 days, higher than 72.9% of scored vulnerabilities.

Timeline

1. 10-04-2017
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.

• CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.