https://github.com/ImageMagick/ImageMagick/issues/851

ImageMagick · Nov 4, 2017 · e04cf3e · e04cf3e
1 parent de87676
commit e04cf3e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/coders/wpg.c b/coders/wpg.c
@@ -1063,6 +1063,8 @@ static Image *ReadWPGImage(const ImageInfo *image_info,
               if ((WPG_Palette.NumOfEntries-WPG_Palette.StartIndex) >
                   (Rec2.RecordLength-2-2) / 3)
                 ThrowReaderException(CorruptImageError,"InvalidColormapIndex");
+              if (WPG_Palette.StartIndex > WPG_Palette.NumOfEntries)
+                ThrowReaderException(CorruptImageError,"InvalidColormapIndex");
               image->colors=WPG_Palette.NumOfEntries;
               if (!AcquireImageColormap(image,image->colors))
                 goto NoMemory;