Commit a0c3781ae for imagemagick.org
commit a0c3781ae050d2b2c8fdfbf98f917aebba077c71
Author: Javid Khan <dxbjavid@gmail.com>
Date: Wed Jun 3 16:56:05 2026 +0530
fix oob read of gps rationals in GetEXIFProperty (#8782)
diff --git a/MagickCore/property.c b/MagickCore/property.c
index 96e2574c7..8af7e39de 100644
--- a/MagickCore/property.c
+++ b/MagickCore/property.c
@@ -1565,6 +1565,8 @@ static void GetEXIFProperty(const Image *image,const char *property,
if ((tag_value == GPS_LATITUDE) || (tag_value == GPS_LONGITUDE) ||
(tag_value == GPS_TIMESTAMP))
{
+ if (number_bytes < 24)
+ break; /* reads three rationals */
components=1;
EXIFGPSFractions("%.20g/%.20g,%.20g/%.20g,%.20g/%.20g",
(double) ReadPropertyUnsignedLong(endian,p),