The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"introduced": "7.0.0-0"
},
{
"last_affected": "7.0.0-0"
},
{
"introduced": "7.0.0-0"
},
{
"last_affected": "7.0.0-0"
},
{
"introduced": "7.0.1-0"
},
{
"last_affected": "7.0.1-0"
},
{
"introduced": "7.0.1-0"
},
{
"last_affected": "7.0.1-0"
},
{
"introduced": "7.0.1-1"
},
{
"last_affected": "7.0.1-1"
},
{
"introduced": "7.0.1-1"
},
{
"last_affected": "7.0.1-1"
},
{
"introduced": "7.0.1-2"
},
{
"last_affected": "7.0.1-2"
},
{
"introduced": "7.0.1-2"
},
{
"last_affected": "7.0.1-2"
},
{
"introduced": "7.0.1-3"
},
{
"last_affected": "7.0.1-3"
},
{
"introduced": "7.0.1-3"
},
{
"last_affected": "7.0.1-3"
},
{
"introduced": "7.0.1-4"
},
{
"last_affected": "7.0.1-4"
},
{
"introduced": "7.0.1-4"
},
{
"last_affected": "7.0.1-4"
},
{
"introduced": "7.0.1-5"
},
{
"last_affected": "7.0.1-5"
},
{
"introduced": "7.0.1-5"
},
{
"last_affected": "7.0.1-5"
},
{
"introduced": "7.0.1-6"
},
{
"last_affected": "7.0.1-6"
},
{
"introduced": "7.0.1-6"
},
{
"last_affected": "7.0.1-6"
},
{
"introduced": "7.0.1-7"
},
{
"last_affected": "7.0.1-7"
},
{
"introduced": "7.0.1-7"
},
{
"last_affected": "7.0.1-7"
},
{
"introduced": "7.0.1-8"
},
{
"last_affected": "7.0.1-8"
},
{
"introduced": "7.0.1-8"
},
{
"last_affected": "7.0.1-8"
},
{
"introduced": "7.0.1-9"
},
{
"last_affected": "7.0.1-9"
},
{
"introduced": "7.0.1-9"
},
{
"last_affected": "7.0.1-9"
},
{
"introduced": "7.0.1-10"
},
{
"last_affected": "7.0.1-10"
},
{
"introduced": "7.0.1-10"
},
{
"last_affected": "7.0.1-10"
},
{
"introduced": "7.0.2-0"
},
{
"last_affected": "7.0.2-0"
},
{
"introduced": "7.0.2-0"
},
{
"last_affected": "7.0.2-0"
},
{
"introduced": "7.0.2-1"
},
{
"last_affected": "7.0.2-1"
},
{
"introduced": "7.0.2-1"
},
{
"last_affected": "7.0.2-1"
},
{
"introduced": "7.0.2-2"
},
{
"last_affected": "7.0.2-2"
},
{
"introduced": "7.0.2-2"
},
{
"last_affected": "7.0.2-2"
},
{
"introduced": "7.0.2-3"
},
{
"last_affected": "7.0.2-3"
},
{
"introduced": "7.0.2-3"
},
{
"last_affected": "7.0.2-3"
},
{
"introduced": "7.0.2-4"
},
{
"last_affected": "7.0.2-4"
},
{
"introduced": "7.0.2-4"
},
{
"last_affected": "7.0.2-4"
},
{
"introduced": "7.0.2-5"
},
{
"last_affected": "7.0.2-5"
},
{
"introduced": "7.0.2-5"
},
{
"last_affected": "7.0.2-5"
},
{
"introduced": "7.0.2-6"
},
{
"last_affected": "7.0.2-6"
},
{
"introduced": "7.0.2-6"
},
{
"last_affected": "7.0.2-6"
},
{
"introduced": "7.0.2-7"
},
{
"last_affected": "7.0.2-7"
},
{
"introduced": "7.0.2-7"
},
{
"last_affected": "7.0.2-7"
},
{
"introduced": "7.0.2-8"
},
{
"last_affected": "7.0.2-8"
},
{
"introduced": "7.0.2-8"
},
{
"last_affected": "7.0.2-8"
},
{
"introduced": "7.0.2-9"
},
{
"last_affected": "7.0.2-9"
},
{
"introduced": "7.0.2-9"
},
{
"last_affected": "7.0.2-9"
},
{
"introduced": "7.0.2-10"
},
{
"last_affected": "7.0.2-10"
},
{
"introduced": "7.0.2-10"
},
{
"last_affected": "7.0.2-10"
},
{
"introduced": "7.0.3-0"
},
{
"last_affected": "7.0.3-0"
},
{
"introduced": "7.0.3-0"
},
{
"last_affected": "7.0.3-0"
},
{
"introduced": "7.0.3-1"
},
{
"last_affected": "7.0.3-1"
},
{
"introduced": "7.0.3-1"
},
{
"last_affected": "7.0.3-1"
},
{
"introduced": "7.0.3-2"
},
{
"last_affected": "7.0.3-2"
},
{
"introduced": "7.0.3-2"
},
{
"last_affected": "7.0.3-2"
},
{
"introduced": "7.0.3-3"
},
{
"last_affected": "7.0.3-3"
},
{
"introduced": "7.0.3-3"
},
{
"last_affected": "7.0.3-3"
},
{
"introduced": "7.0.3-4"
},
{
"last_affected": "7.0.3-4"
},
{
"introduced": "7.0.3-4"
},
{
"last_affected": "7.0.3-4"
},
{
"introduced": "7.0.3-5"
},
{
"last_affected": "7.0.3-5"
},
{
"introduced": "7.0.3-5"
},
{
"last_affected": "7.0.3-5"
},
{
"introduced": "7.0.3-6"
},
{
"last_affected": "7.0.3-6"
},
{
"introduced": "7.0.3-6"
},
{
"last_affected": "7.0.3-6"
},
{
"introduced": "7.0.3-7"
},
{
"last_affected": "7.0.3-7"
},
{
"introduced": "7.0.3-7"
},
{
"last_affected": "7.0.3-7"
},
{
"introduced": "7.0.3-8"
},
{
"last_affected": "7.0.3-8"
},
{
"introduced": "7.0.3-8"
},
{
"last_affected": "7.0.3-8"
},
{
"introduced": "7.0.3-9"
},
{
"last_affected": "7.0.3-9"
},
{
"introduced": "7.0.3-9"
},
{
"last_affected": "7.0.3-9"
},
{
"introduced": "7.0.3-10"
},
{
"last_affected": "7.0.3-10"
},
{
"introduced": "7.0.3-10"
},
{
"last_affected": "7.0.3-10"
},
{
"introduced": "7.0.4-0"
},
{
"last_affected": "7.0.4-0"
},
{
"introduced": "7.0.4-0"
},
{
"last_affected": "7.0.4-0"
},
{
"introduced": "7.0.4-1"
},
{
"last_affected": "7.0.4-1"
},
{
"introduced": "7.0.4-1"
},
{
"last_affected": "7.0.4-1"
},
{
"introduced": "7.0.4-2"
},
{
"last_affected": "7.0.4-2"
},
{
"introduced": "7.0.4-2"
},
{
"last_affected": "7.0.4-2"
},
{
"introduced": "7.0.4-3"
},
{
"last_affected": "7.0.4-3"
},
{
"introduced": "7.0.4-3"
},
{
"last_affected": "7.0.4-3"
},
{
"introduced": "7.0.4-4"
},
{
"last_affected": "7.0.4-4"
},
{
"introduced": "7.0.4-4"
},
{
"last_affected": "7.0.4-4"
},
{
"introduced": "7.0.4-5"
},
{
"last_affected": "7.0.4-5"
},
{
"introduced": "7.0.4-5"
},
{
"last_affected": "7.0.4-5"
},
{
"introduced": "7.0.4-6"
},
{
"last_affected": "7.0.4-6"
},
{
"introduced": "7.0.4-6"
},
{
"last_affected": "7.0.4-6"
},
{
"introduced": "7.0.4-7"
},
{
"last_affected": "7.0.4-7"
},
{
"introduced": "7.0.4-7"
},
{
"last_affected": "7.0.4-7"
},
{
"introduced": "7.0.4-8"
},
{
"last_affected": "7.0.4-8"
},
{
"introduced": "7.0.4-8"
},
{
"last_affected": "7.0.4-8"
},
{
"introduced": "7.0.4-9"
},
{
"last_affected": "7.0.4-9"
},
{
"introduced": "7.0.4-9"
},
{
"last_affected": "7.0.4-9"
},
{
"introduced": "7.0.4-10"
},
{
"last_affected": "7.0.4-10"
},
{
"introduced": "7.0.4-10"
},
{
"last_affected": "7.0.4-10"
},
{
"introduced": "7.0.5-0"
},
{
"last_affected": "7.0.5-0"
},
{
"introduced": "7.0.5-0"
},
{
"last_affected": "7.0.5-0"
},
{
"introduced": "7.0.5-1"
},
{
"last_affected": "7.0.5-1"
},
{
"introduced": "7.0.5-1"
},
{
"last_affected": "7.0.5-1"
},
{
"introduced": "7.0.5-4"
},
{
"last_affected": "7.0.5-4"
},
{
"introduced": "7.0.5-4"
},
{
"last_affected": "7.0.5-4"
},
{
"introduced": "7.0.5-5"
},
{
"last_affected": "7.0.5-5"
},
{
"introduced": "7.0.5-5"
},
{
"last_affected": "7.0.5-5"
},
{
"introduced": "7.0.5-6"
},
{
"last_affected": "7.0.5-6"
},
{
"introduced": "7.0.5-6"
},
{
"last_affected": "7.0.5-6"
},
{
"introduced": "7.0.5-7"
},
{
"last_affected": "7.0.5-7"
},
{
"introduced": "7.0.5-7"
},
{
"last_affected": "7.0.5-7"
},
{
"introduced": "7.0.5-8"
},
{
"last_affected": "7.0.5-8"
},
{
"introduced": "7.0.5-8"
},
{
"last_affected": "7.0.5-8"
},
{
"introduced": "7.0.6-1"
},
{
"last_affected": "7.0.6-1"
},
{
"introduced": "7.0.6-1"
},
{
"last_affected": "7.0.6-1"
}
],
"vendor_product": "imagemagick:imagemagick",
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:imagemagick:imagemagick:7.0.0-0:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-0:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-10:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-1:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-2:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-3:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-4:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-5:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-6:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-7:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-8:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.1-9:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-0:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-10:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-1:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-2:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-3:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-4:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-5:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-6:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-7:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-8:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.2-9:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-0:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-10:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-1:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-3:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-4:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-5:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-6:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-7:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-8:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.3-9:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-0:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-10:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-1:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-2:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-3:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-4:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-5:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-6:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-7:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-8:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.4-9:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-0:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-1:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-4:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-5:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-6:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-7:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.5-8:*:*:*:*:*:*:*",
"cpe:2.3:a:imagemagick:imagemagick:7.0.6-1:*:*:*:*:*:*:*"
]
}
]
}[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 4686.0,
"function_hash": "180450710608254866013109915597773917175"
},
"source": "https://github.com/imagemagick/imagemagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078",
"id": "CVE-2017-11523-496f734f",
"target": {
"function": "ReadTXTImage",
"file": "coders/txt.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 4816.0,
"function_hash": "45638996093977785176899829879588104286"
},
"source": "https://github.com/imagemagick/imagemagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78",
"id": "CVE-2017-11523-4a23aa6d",
"target": {
"function": "ReadTXTImage",
"file": "coders/txt.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"293132639550686252943777814893455938991",
"24775840811269968812455041094876789355",
"91952965131490362917776372869527975875",
"43057554049194080852020751061738535897"
],
"threshold": 0.9
},
"source": "https://github.com/imagemagick/imagemagick/commit/83e0f8ffd7eeb7661b0ff83257da23d24ca7f078",
"id": "CVE-2017-11523-a34d393c",
"target": {
"file": "coders/txt.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"293132639550686252943777814893455938991",
"24775840811269968812455041094876789355",
"91952965131490362917776372869527975875",
"43057554049194080852020751061738535897"
],
"threshold": 0.9
},
"source": "https://github.com/imagemagick/imagemagick/commit/a8f9c2aabed37cd6a728532d1aed13ae0f3dfd78",
"id": "CVE-2017-11523-c0485d9c",
"target": {
"file": "coders/txt.c"
}
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11523.json"
"2026-07-11T18:19:14Z"
{
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "6.9.9-0"
}
],
"cpe": "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
"source": "CPE_RANGE"
}