Commit c5f2c6c9f for imagemagick.org
commit c5f2c6c9fb1458f960a506691c9351e9da6d2247
Author: Cristy <urban-warrior@imagemagick.org>
Date: Sun Oct 25 08:55:21 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh
diff --git a/MagickCore/cache.c b/MagickCore/cache.c
index af3c553e2..171f426f3 100644
--- a/MagickCore/cache.c
+++ b/MagickCore/cache.c
@@ -4353,6 +4353,14 @@ MagickPrivate Quantum *QueueAuthenticPixelCacheNexus(Image *image,
"PixelsAreNotAuthentic","`%s'",image->filename);
return((Quantum *) NULL);
}
+ if ((columns == 0) || (rows == 0) ||
+ ((MagickSizeType) columns > (MagickSizeType) (cache_info->columns-x)) ||
+ ((MagickSizeType) rows > (MagickSizeType) (cache_info->rows-y)))
+ {
+ (void) ThrowMagickException(exception,GetMagickModule(),CacheError,
+ "PixelsAreNotAuthentic","`%s'",image->filename);
+ return((Quantum *) NULL);
+ }
if (IsValidPixelOffset(y,cache_info->columns) == MagickFalse)
return((Quantum *) NULL);
offset=y*(MagickOffsetType) cache_info->columns;