Commit 4cc111461 for imagemagick.org
commit 4cc111461b7c9120fbf4e3f1596f8ab7fe929685
Author: Cristy <urban-warrior@imagemagick.org>
Date: Fri Jun 19 18:12:46 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9ch6-2c6r-55q4
diff --git a/coders/json.c b/coders/json.c
index e0df78e68..b7d042d99 100644
--- a/coders/json.c
+++ b/coders/json.c
@@ -1552,7 +1552,18 @@ static MagickBooleanType EncodeImageAttributes(Image *image,FILE *file,
JSONFormatLocaleFile(file,"{\n \"name\": %s",
image_info->filename);
handler=SetWarningHandler((WarningHandler) NULL);
- tile=ReadImage(image_info,exception);
+ tile=(Image *) NULL;
+ {
+ char
+ magic[MagickPathExtent] = { '\0' };
+
+ GetPathComponent(image_info->filename,MagickPath,magic);
+ if (*magic == '\0')
+ tile=ReadImage(image_info,exception);
+ else
+ (void) ThrowMagickException(exception,GetMagickModule(),
+ FileOpenError,"UnableToOpenFile","`%s'",image_info->filename);
+ }
(void) SetWarningHandler(handler);
if (tile == (Image *) NULL)
{
diff --git a/coders/yaml.c b/coders/yaml.c
index d68111820..7a7518c42 100644
--- a/coders/yaml.c
+++ b/coders/yaml.c
@@ -1521,7 +1521,18 @@ static MagickBooleanType EncodeImageAttributes(Image *image,FILE *file,
YAMLFormatLocaleFile(file,"\n - name: %s",
image_info->filename);
handler=SetWarningHandler((WarningHandler) NULL);
- tile=ReadImage(image_info,exception);
+ tile=(Image *) NULL;
+ {
+ char
+ magic[MagickPathExtent] = { '\0' };
+
+ GetPathComponent(image_info->filename,MagickPath,magic);
+ if (*magic == '\0')
+ tile=ReadImage(image_info,exception);
+ else
+ (void) ThrowMagickException(exception,GetMagickModule(),
+ FileOpenError,"UnableToOpenFile","`%s'",image_info->filename);
+ }
(void) SetWarningHandler(handler);
if (tile == (Image *) NULL)
{