Commit 6b8bf8cb8 for imagemagick.org

commit 6b8bf8cb855358f2268604fc7f60ddcc08b62c0b
Author: Cristy <urban-warrior@imagemagick.org>
Date:   Sat May 2 19:05:29 2026 -0400

    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw3g-wvj6-3p7w

diff --git a/coders/cin.c b/coders/cin.c
index 1ad52afbe..069174a99 100644
--- a/coders/cin.c
+++ b/coders/cin.c
@@ -730,6 +730,8 @@ static Image *ReadCINImage(const ImageInfo *image_info,ExceptionInfo *exception)
       (void) CloseBlob(image);
       return(image);
     }
+  if (HeapOverflowSanityCheck(image->columns,3*image->depth) != MagickFalse)
+    ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
   if (((MagickSizeType) image->columns*image->rows/8) > GetBlobSize(image))
     ThrowReaderException(CorruptImageError,"InsufficientImageDataInFile");
   for ( ; offset < (MagickOffsetType) cin.file.image_offset; offset++)
diff --git a/coders/dpx.c b/coders/dpx.c
index efd5cc31b..4352435b4 100644
--- a/coders/dpx.c
+++ b/coders/dpx.c
@@ -1141,6 +1141,8 @@ static Image *ReadDPXImage(const ImageInfo *image_info,ExceptionInfo *exception)
       (void) CloseBlob(image);
       return(GetFirstImageInList(image));
     }
+  if (HeapOverflowSanityCheck(image->columns,4*image->depth) != MagickFalse)
+    ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
   status=SetImageExtent(image,image->columns,image->rows,exception);
   if (status == MagickFalse)
     return(DestroyImageList(image));