https://github.com/ImageMagick/ImageMagick/issues/867

ImageMagick · Nov 17, 2017 · 9da3b39 · 9da3b39
1 parent be27412
commit 9da3b39
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/coders/dds.c b/coders/dds.c
@@ -1865,6 +1865,8 @@ static MagickBooleanType ReadDDSInfo(Image *image, DDSInfo *dds_info)
   dds_info->pitchOrLinearSize = ReadBlobLSBLong(image);
   dds_info->depth = ReadBlobLSBLong(image);
   dds_info->mipmapcount = ReadBlobLSBLong(image);
+  if (dds_info->mipmapcount > GetBlobSize(image))
+    return MagickFalse;
 
   (void) SeekBlob(image, 44, SEEK_CUR);   /* reserved region of 11 DWORDs */