From d3c0a37485314c5ccef72efb18f3847cd53868ba Mon Sep 17 00:00:00 2001 From: Cristy Date: Tue, 24 Mar 2026 08:29:45 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f4qm-vj5j-9xpw --- MagickCore/fx.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/MagickCore/fx.c b/MagickCore/fx.c index b85cd810d22..8492856075f 100644 --- a/MagickCore/fx.c +++ b/MagickCore/fx.c @@ -2687,6 +2687,13 @@ static MagickBooleanType TranslateExpression ( ternary.addr_query = NULL_ADDRESS; ternary.addr_colon = NULL_ADDRESS; + if (pfx->teDepth >= MagickMaxRecursionDepth) { + (void) ThrowMagickException(pfx->exception, GetMagickModule(), OptionError, + "Expression too deeply nested", "(depth %i exceeds limit %i)", + pfx->teDepth, MagickMaxRecursionDepth); + return MagickFalse; + } + pfx->teDepth++; *chLimit = '\0';