Commit 942452758 for imagemagick.org

commit 942452758639e78f4c37c93927f8134b496bfcc0
Author: Cristy <urban-warrior@imagemagick.org>
Date:   Mon Nov 9 07:43:06 2026 -0500

    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wv7h-c62j-8wfx

diff --git a/coders/dng.c b/coders/dng.c
index 4a69992cd..cfc5d5649 100644
--- a/coders/dng.c
+++ b/coders/dng.c
@@ -409,14 +409,16 @@ static void ReadLibRawProfiles(Image *image,const libraw_data_t *raw_info,
   StringInfo
     *profile;

-  if (raw_info->color.profile != NULL)
+  if ((raw_info->color.profile != NULL) &&
+      ((MagickOffsetType) raw_info->color.profile_length <= GetBlobSize(image)))
     {
       profile=BlobToProfileStringInfo("icc",raw_info->color.profile,
         raw_info->color.profile_length,exception);
       (void) SetImageProfilePrivate(image,profile,exception);
     }
 #if LIBRAW_COMPILE_CHECK_VERSION_NOTLESS(0,18)
-  if (raw_info->idata.xmpdata != NULL)
+  if ((raw_info->idata.xmpdata != NULL) &&
+      ((MagickOffsetType) raw_info->idata.xmplen <= GetBlobSize(image)))
     {
       profile=BlobToProfileStringInfo("xmp",raw_info->idata.xmpdata,
         raw_info->idata.xmplen,exception);