CVE-2017-11310

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Q16 2017-06-21 (beta)

Description The issue is related to memory leak vulnerabilities in the read user chunk callback function, located in coderspng.c, which can be exploited via crafted PNG files.

Recommendations For ImageMagick version 7.0.6-1 Q16 2017-06-21 (beta), consider restricting the use of the read user chunk callback function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.