Commit a1fb00b14 for imagemagick.org
commit a1fb00b14231a58215aea67b18321c20963d8858
Author: Dirk Lemstra <dirk@lemstra.org>
Date: Fri Nov 13 20:59:50 2026 +0100
Added missing check for the component_size in the PICT decoder (GHSA-4jg2-g974-7w79)
diff --git a/coders/pict.c b/coders/pict.c
index 1e1844e2f..610a65ecd 100644
--- a/coders/pict.c
+++ b/coders/pict.c
@@ -806,7 +806,8 @@ static MagickBooleanType ReadPixmap(Image *image,PICTPixmap *pixmap)
pixmap->reserved=ReadBlobMSBLong(image);
if ((EOFBlob(image) != MagickFalse) || (pixmap->bits_per_pixel <= 0) ||
(pixmap->bits_per_pixel > 32) || (pixmap->component_count <= 0) ||
- (pixmap->component_count > 4) || (pixmap->component_size <= 0))
+ (pixmap->component_count > 4) || (pixmap->component_size <= 0) ||
+ (pixmap->component_size > 32))
return(MagickFalse);
return(MagickTrue);
}