Commit 0eb34f7c3 for imagemagick.org
commit 0eb34f7c37737601f146284a042677b8b6298ebf
Author: Cristy <urban-warrior@imagemagick.org>
Date: Mon May 11 19:27:24 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gj92-pwm7-jcmp
diff --git a/coders/webp.c b/coders/webp.c
index e799aa7ab..07d8293b4 100644
--- a/coders/webp.c
+++ b/coders/webp.c
@@ -61,6 +61,7 @@
#include "MagickCore/profile-private.h"
#include "MagickCore/property.h"
#include "MagickCore/quantum-private.h"
+#include "MagickCore/resource_.h"
#include "MagickCore/static.h"
#include "MagickCore/string_.h"
#include "MagickCore/string-private.h"
@@ -488,6 +489,14 @@ static int ReadAnimatedWEBPImage(const ImageInfo *image_info,Image *image,
(void) SetImageProperty(image,"webp:mux-blend",
"AtopBackgroundAlphaBlend",exception);
image_count++;
+ if (AcquireMagickResource(ListLengthResource,image_count) == MagickFalse)
+ {
+ (void) ThrowMagickException(exception,GetMagickModule(),
+ ResourceLimitError,"ListLengthExceedsLimit","`%s'",
+ image_info->filename);
+ webp_status=VP8_STATUS_SUSPENDED;
+ break;
+ }
} while (WebPDemuxNextFrame(&iter));
WebPDemuxReleaseIterator(&iter);
}