Commit 63dde0cf2 for imagemagick.org

commit 63dde0cf281383ab69432b88305f7dcd6a8ce900
Author: Cristy <urban-warrior@imagemagick.org>
Date:   Tue Sep 29 10:29:48 2026 -0400

    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w

diff --git a/coders/pict.c b/coders/pict.c
index 0e60638b1..1e1844e2f 100644
--- a/coders/pict.c
+++ b/coders/pict.c
@@ -475,6 +475,11 @@ static unsigned char *DecodeImage(Image *blob,Image *image,
       for (y=0; y < (ssize_t) image->rows; y++)
       {
         q=pixels+y*(ssize_t) width*(ssize_t) GetPixelChannels(image);
+        if (q < pixels)
+          {
+            status=MagickFalse;
+            break;
+          }
         number_pixels=bytes_per_line;
         count=ReadBlob(blob,(size_t) number_pixels,scanline);
         if (count != (ssize_t) number_pixels)
@@ -501,6 +506,11 @@ static unsigned char *DecodeImage(Image *blob,Image *image,
   for (y=0; y < (ssize_t) image->rows; y++)
   {
     q=pixels+y*(ssize_t) width;
+    if (q < pixels)
+      {
+        status=MagickFalse;
+        break;
+      }
     if (bytes_per_line > 250)
       scanline_length=ReadBlobMSBShort(blob);
     else