Harden codec and metadata input validation - #3187

Merged

JimBobSquarePants merged 27 commits into

release/4.1.xfrom

fix/security-advisory-triage

Sep 12, 2026

Commits on Sep 4, 2026

Validate decoded image dimensions
JimBobSquarePants
committed
7781fbd
Reject duplicate PNG headers
JimBobSquarePants
committed
23ed0b0
Use wide arithmetic for PNG scanline lengths
JimBobSquarePants
committed
ea0475e
Cover large PNG average-filter scanlines
JimBobSquarePants
committed
0446ba0
Validate WebP metadata chunk lengths
JimBobSquarePants
committed
2b52b55
Validate embedded profile extents
JimBobSquarePants
committed
14ddc15
Apply EXIF part selection when encoding WebP
JimBobSquarePants
committed
84613d4
Validate ICC CLUT storage before allocation
JimBobSquarePants
committed
8de892a
Reject undersized ICC tag entries
JimBobSquarePants
committed
73d8e02
Bound BigTIFF directory entry counts
JimBobSquarePants
committed
92b12d7
Clamp histogram luminance indices
JimBobSquarePants
committed
c4c4bf2
Size CCITT encoder output buffers
JimBobSquarePants
committed
a9498c6
Cover narrow CCITT Group 4 re-encoding
JimBobSquarePants
committed
cdc79d0
Reject unsupported ICC conversion channels
JimBobSquarePants
committed
b03f0ed
Reject short EXR ZIP output
JimBobSquarePants
committed
3c43cf5
Handle partial EXR scanline blocks
JimBobSquarePants
committed
6ed2a27
Normalize metadata extents and preserve decoder recovery policies
JimBobSquarePants
committed
18532d7
Apply EXIF part selection at serialization boundary
JimBobSquarePants
committed
b335b8a
Restore WebP ICC framing comments
JimBobSquarePants
committed
584b662

Commits on Sep 5, 2026