Commit 404ff84e7 for imagemagick.org
commit 404ff84e7dcf76b5e9ff2daffb6f8ff512cdd945
Author: Cristy <urban-warrior@imagemagick.org>
Date: Mon May 18 19:17:29 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6mwj-rp89-6j5j
diff --git a/coders/pict.c b/coders/pict.c
index 29d88108e..0e60638b1 100644
--- a/coders/pict.c
+++ b/coders/pict.c
@@ -1268,6 +1268,9 @@ static Image *ReadPICTImage(const ImageInfo *image_info,
if (ReadBlobByte(image) == EOF)
break;
}
+ if (((MagickSizeType) tile_image->rows*tile_image->columns/8) > GetBlobSize(image))
+ ThrowPICTException(CorruptImageError,
+ "InsufficientImageDataInFile");
if ((code != 0x9a) && (code != 0x9b) &&
(bytes_per_line & 0x8000) == 0)
pixels=DecodeImage(image,tile_image,(size_t) bytes_per_line,1,