possible DoS @ stdin (OCE-2022-70); possible arbitrary file leak (OCE…

…-2022-72)
ImageMagick · Oct 22, 2022 · 05673e6 · 05673e6
1 parent 09e738e
commit 05673e6
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/coders/png.c b/coders/png.c
@@ -3980,6 +3980,7 @@ static Image *ReadOnePNGImage(MngInfo *mng_info,
                 (void) FormatLocaleString(key,MagickPathExtent,"%s",
                   text[i].key);
                 if ((LocaleCompare(key,"version") == 0) ||
+                    (LocaleCompare(key,"profile") == 0) ||
                     (LocaleCompare(key,"width") == 0))
                   (void) FormatLocaleString(key,MagickPathExtent,"png:%s",
                     text[i].key);