Commit 9ee821731 for imagemagick.org
commit 9ee821731faee8c4cc44103cc4180854046bb13c
Author: Cristy <urban-warrior@imagemagick.org>
Date: Mon May 18 21:56:32 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489
diff --git a/MagickCore/draw.c b/MagickCore/draw.c
index 12de6fba9..6ac2c8692 100644
--- a/MagickCore/draw.c
+++ b/MagickCore/draw.c
@@ -2537,6 +2537,7 @@ static MagickBooleanType RenderMVGContent(Image *image,
*macros;
ssize_t
+ classDepth = 0,
defsDepth,
i,
j,
@@ -2748,6 +2749,13 @@ static MagickBooleanType RenderMVGContent(Image *image,
break;
if (i <= n)
break;
+ if (classDepth++ > MagickMaxRecursionDepth)
+ {
+ (void) ThrowMagickException(exception,GetMagickModule(),
+ DrawError,"VectorGraphicsNestedTooDeeply","`%s'",token);
+ status=MagickFalse;
+ break;
+ }
mvg_class=(const char *) GetValueFromSplayTree(macros,token);
if ((graphic_context[n]->render != MagickFalse) &&
(mvg_class != (const char *) NULL) && (p > primitive))