https://github.com/ImageMagick/ImageMagick/issues/533

diff --git a/coders/dcm.c b/coders/dcm.c
index f1be260dc27685ef81c3c6ea56022be94a6e18f6..04584d505bff501ddf98fa8dc346cc2b6148301d 100644 (file)
--- a/coders/dcm.c
+++ b/coders/dcm.c
@@ -3269,6 +3269,8 @@ static Image *ReadDCMImage(const ImageInfo *image_info,ExceptionInfo *exception)
         else
           if ((quantum != 0) && (length != 0))
             {
+              if (length > GetBlobSize(image))
+                ThrowReaderException(CorruptImageError,"ImproperImageHeader");
               if (~length >= 1)
                 data=(unsigned char *) AcquireQuantumMemory(length+1,quantum*
                   sizeof(*data));