From bcd8519c70ecd9ebbc180920f2cf97b267d1f440 Mon Sep 17 00:00:00 2001 From: Cristy Date: Wed, 25 Mar 2026 19:54:25 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-26qp-ffjh-2x4v --- MagickCore/effect.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/MagickCore/effect.c b/MagickCore/effect.c index 0b886d3a534..834933aab71 100644 --- a/MagickCore/effect.c +++ b/MagickCore/effect.c @@ -1369,7 +1369,13 @@ MagickExport Image *DespeckleImage(const Image *image,ExceptionInfo *exception) /* Allocate image buffer. */ - length=(size_t) ((image->columns+2)*(image->rows+2)); + if ((image->columns > (MAGICK_SIZE_MAX-2)) || + (image->rows > (MAGICK_SIZE_MAX-2))) + { + despeckle_image=DestroyImage(despeckle_image); + ThrowImageException(ResourceLimitError,"MemoryAllocationFailed"); + } + length=(image->columns+2)*(image->rows+2); pixel_info=AcquireVirtualMemory(length,sizeof(*pixels)); buffer_info=AcquireVirtualMemory(length,sizeof(*buffer)); if ((pixel_info == (MemoryInfo *) NULL) ||