Commit 4c72003e9 for imagemagick.org
commit 4c72003e9e54a4ebaa938d239e75f5d285527ebe
Author: Cristy <urban-warrior@imagemagick.org>
Date: Tue Mar 24 08:17:13 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x9h5-r9v2-vcww
diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index 4ad6a9817..384912707 100644
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -3462,7 +3462,8 @@ static MagickBooleanType RenderMVGContent(Image *image,
break;
}
if ((q == (char *) NULL) || (*q == '\0') ||
- (p == (char *) NULL) || ((q-4) < p))
+ (p == (char *) NULL) || ((q-4) < p) ||
+ ((q-p+4+1) > MagickPathExtent))
{
status=MagickFalse;
break;
@@ -3577,7 +3578,8 @@ static MagickBooleanType RenderMVGContent(Image *image,
continue;
break;
}
- if ((q == (char *) NULL) || (p == (char *) NULL) || ((q-4) < p))
+ if ((q == (char *) NULL) || (p == (char *) NULL) || ((q-4) < p) ||
+ ((q-p+4+1) > MagickPathExtent))
{
status=MagickFalse;
break;