In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
CVE Details: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-13658
@maintainer(s), after bump, please follow procedure to stabilize if needed and close on report, thank you.
Gentoo Security Scout
Upstream Bug: https://github.com/ImageMagick/ImageMagick/issues/599
Upstream Bug: https://github.com/ImageMagick/ImageMagick/issues/598
@maintainer(s), above patches were pushed under incorrect ticket upstream. All patches in OUR ticket here apply to same CVE.
Daj Uan (jmbailey/mbailey_j)
Gentoo Security Padawan