GHSA-rg39-4fm5-hrp2

Duplicate Advisory: ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds

Published

2026-06-21

Modified

2026-11-03

Sources

github-advisory

Summary

### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-273h-m46v-96q4. This link is maintained to preserve external references. ### Original Description ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out-of-bounds read on 32-bit builds. Processing a crafted PSB file can lead to information disclosure or a crash.

Affected packages

Remediation: Upgrade to 14.10.3 or later.

References

• https://github.com/advisories/GHSA-rg39-4fm5-hrp2