File ImageMagick-CVE-2026-24481.patch of Package ImageMagick.42998
From 51c9d33f4770cdcfa1a029199375d570af801c97 Mon Sep 17 00:00:00 2001
From: Dirk Lemstra <dirk@lemstra.org>
Date: Fri, 23 Jan 2026 13:19:06 +0100
Subject: [PATCH] Initialize the pixels with empty values to prevent possible
heap information disclosure (GHSA-96pc-27rx-pr36)
---
coders/psd.c | 1 +
1 file changed, 1 insertion(+)
Index: ImageMagick-7.1.0-9/coders/psd.c
===================================================================
--- ImageMagick-7.1.0-9.orig/coders/psd.c
+++ ImageMagick-7.1.0-9/coders/psd.c
@@ -1363,6 +1363,7 @@ static MagickBooleanType ReadPSDChannelZ
ThrowBinaryException(ResourceLimitError,"MemoryAllocationFailed",
image->filename);
}
+ memset(pixels,0,count*sizeof(*pixels));
if (ReadBlob(image,compact_size,compact_pixels) != (ssize_t) compact_size)
{
pixels=(unsigned char *) RelinquishMagickMemory(pixels);