In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c. https://nvd.nist.gov/vuln/detail/CVE-2017-13141