Commit bcd8519c7 for imagemagick.org
commit bcd8519c70ecd9ebbc180920f2cf97b267d1f440
Author: Cristy <urban-warrior@imagemagick.org>
Date: Wed Mar 25 19:54:25 2026 -0400
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-26qp-ffjh-2x4v
diff --git a/MagickCore/effect.c b/MagickCore/effect.c
index 0b886d3a5..834933aab 100644
--- a/MagickCore/effect.c
+++ b/MagickCore/effect.c
@@ -1369,7 +1369,13 @@ MagickExport Image *DespeckleImage(const Image *image,ExceptionInfo *exception)
/*
Allocate image buffer.
*/
- length=(size_t) ((image->columns+2)*(image->rows+2));
+ if ((image->columns > (MAGICK_SIZE_MAX-2)) ||
+ (image->rows > (MAGICK_SIZE_MAX-2)))
+ {
+ despeckle_image=DestroyImage(despeckle_image);
+ ThrowImageException(ResourceLimitError,"MemoryAllocationFailed");
+ }
+ length=(image->columns+2)*(image->rows+2);
pixel_info=AcquireVirtualMemory(length,sizeof(*pixels));
buffer_info=AcquireVirtualMemory(length,sizeof(*buffer));
if ((pixel_info == (MemoryInfo *) NULL) ||