Commit 38b6468b9 for imagemagick.org
commit 38b6468b97bcb39b2f4d0ecc67666e8951b142f7
Author: Cristy <urban-warrior@imagemagick.org>
Date: Wed Jun 24 19:40:19 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g568-j2hh-jr58
diff --git a/coders/wbmp.c b/coders/wbmp.c
index 1427cec20..69976460f 100644
--- a/coders/wbmp.c
+++ b/coders/wbmp.c
@@ -181,6 +181,9 @@ static Image *ReadWBMPImage(const ImageInfo *image_info,
(void) CloseBlob(image);
return(GetFirstImageInList(image));
}
+ if ((image->columns > GetBlobSize(image)) ||
+ (image->rows > GetBlobSize(image)))
+ ThrowReaderException(CorruptImageError,"InsufficientImageDataInFile");
status=SetImageExtent(image,image->columns,image->rows,exception);
if (status == MagickFalse)
return(DestroyImageList(image));