In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows malicious users to cause a use after free via a crafted file.
imagemagick imagemagick 7.0.7-36