File ImageMagick-CVE-2026-25796.patch of Package ImageMagick.42998
From 93ad259ce4f6d641eea0bee73f374af90f35efc3 Mon Sep 17 00:00:00 2001
From: Dirk Lemstra <dirk@lemstra.org>
Date: Fri, 6 Feb 2026 21:10:47 +0100
Subject: [PATCH] Prevent memory leak in early exits (GHSA-g2pr-qxjg-7r2w)
---
coders/stegano.c | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/coders/stegano.c b/coders/stegano.c
index 1b5b366063a..f3aa0f81046 100644
--- a/coders/stegano.c
+++ b/coders/stegano.c
@@ -150,15 +150,22 @@ static Image *ReadSTEGANOImage(const ImageInfo *image_info,
return(DestroyImage(image));
watermark->depth=MAGICKCORE_QUANTUM_DEPTH;
if (AcquireImageColormap(image,MaxColormapSize,exception) == MagickFalse)
- ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
+ {
+ watermark=DestroyImage(watermark);
+ ThrowReaderException(ResourceLimitError,"MemoryAllocationFailed");
+ }
if (image_info->ping != MagickFalse)
{
+ watermark=DestroyImage(watermark);
(void) CloseBlob(image);
return(GetFirstImageInList(image));
}
status=SetImageExtent(image,image->columns,image->rows,exception);
if (status == MagickFalse)
- return(DestroyImageList(image));
+ {
+ watermark=DestroyImage(watermark);
+ return(DestroyImageList(image));
+ }
for (y=0; y < (ssize_t) image->rows; y++)
{
q=QueueAuthenticPixels(image,0,y,image->columns,1,exception);