Commit 51c9d33f4 for imagemagick.org
commit 51c9d33f4770cdcfa1a029199375d570af801c97
Author: Dirk Lemstra <dirk@lemstra.org>
Date: Fri Jan 23 13:19:06 2026 +0100
Initialize the pixels with empty values to prevent possible heap information disclosure (GHSA-96pc-27rx-pr36)
diff --git a/coders/psd.c b/coders/psd.c
index 28495c6d5..bb4ceecd6 100644
--- a/coders/psd.c
+++ b/coders/psd.c
@@ -1334,6 +1334,7 @@ static MagickBooleanType ReadPSDChannelZip(Image *image,
ThrowBinaryException(ResourceLimitError,"MemoryAllocationFailed",
image->filename);
}
+ memset(pixels,0,count*sizeof(*pixels));
if (ReadBlob(image,compact_size,compact_pixels) != (ssize_t) compact_size)
{
pixels=(unsigned char *) RelinquishMagickMemory(pixels);