In ImageMagick the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file. Upstream bug: https://github.com/ImageMagick/ImageMagick/issues/454