ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
{ "vanir_signatures": [ { "id": "CVE-2019-13299-e1ed866e", "digest": { "line_hashes": [ "339041006877260622842758596649820548194", "270494649456475063785552562454218084640", "163454909510423173676543629697694326456", "319313245680622587038287546617497972334" ], "threshold": 0.9 }, "source": "https://github.com/imagemagick/imagemagick/commit/8187d2d8fd010d2d6b1a3a8edd935beec404dddc", "target": { "file": "MagickCore/pixel-accessor.h" }, "signature_version": "v1", "deprecated": false, "signature_type": "Line" } ] }