From ae679e2fd19ec656bfab9f822ae4cf06bf91604d Mon Sep 17 00:00:00 2001
From: Cristy <urban-warrior@imagemagick.org>
Date: Tue, 24 Mar 2026 11:33:21 -0400
Subject: [PATCH] 
 https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cr67-pvmx-2pp2

---
 MagickCore/xml-tree.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/MagickCore/xml-tree.c b/MagickCore/xml-tree.c
index 51de8ecbc3..4850f851b9 100644
--- a/MagickCore/xml-tree.c
+++ b/MagickCore/xml-tree.c
@@ -1919,8 +1919,8 @@ MagickExport XMLTreeInfo *NewXMLTree(const char *xml,ExceptionInfo *exception)
         "ParseError","UTF16 to UTF8 failed");
       return((XMLTreeInfo *) NULL);
     }
-  terminal=utf8[length-1];
-  utf8[length-1]='\0';
+  terminal=utf8[MagickMax(length-1,0)];
+  utf8[MagickMax(length-1,0)]='\0';
   p=utf8;
   while ((*p != '\0') && (*p != '<'))
     p++;