ImageMagick is vulnerable to denial of service (DoS). The attack is possible because coders/png.c
does not have of a proper length check related to Magick_png_write_raw_profile
and LocaleNCompare
before writing PNG image, allowing an attacker to input a malicious PNG file to trigger a heap buffer overflow.