GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11139.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "1.3.26" } ] }, { "events": [ { "introduced": "0" }, { "last_affected": "9.0" } ] } ]