CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

DEBIAN-CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

UBUNTU-CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

UBUNTU-CVE-2025-27796

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob...

CVE-2025-27795

GraphicsMagick products affected: ReadJXLImage in JXL code path of GraphicsMagick before 1.3.46 lacks image dimension resource limits, per CVE-2025-27795. This can enable resource exhaustion/DoS when processing certain images. Advisories indicate upgrading to GraphicsMagick 1.3.46 or later to rem...

CVE-2025-27796

CVE-2025-27796: ReadWPGImage in WPG of GraphicsMagick before 1.3.46 mishandles palette buffer allocation, causing out-of-bounds access in ReadBlob. This affects GraphicsMagick; exploitation depended on an under-1.3.46 build. Mitigation: upgrade GraphicsMagick to 1.3.46 or newer (per advisories fo...

CVE-2025-27796

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob...

CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

CVE-2025-27796

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob...

CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

GraphicsMagick 安全漏洞

GraphicsMagick is GraphicsMagick open source set of simple image processing tools. It provides resizing, rotation, highlighting and other functions. A security vulnerability exists in GraphicsMagick versions prior to 1.3.46, which stems from an improperly allocated palette buffer in the...

GraphicsMagick 安全漏洞

GraphicsMagick is GraphicsMagick open source set of simple image processing tools. It provides resizing, rotation, highlighting and other functions. A security vulnerability exists in GraphicsMagick versions prior to 1.3.46, which stems from a lack of image dimension resource constraints in the...

PT-2025-10041

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions prior to 1.3.46 Description The issue concerns the mishandling of palette buffer allocation in WPG, which is a part of GraphicsMagick. Recommendations For versions prior to 1.3.46, update to version 1.3.46 or later to...

CVE-2025-27796

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob...

CVE-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...

Linux Distros Unpatched Vulnerability : CVE-2019-7397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. CVE-2019-7397 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2017-13066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c. CVE-2017-13066 Note that Nessus relies on the presence of th...

Linux Distros Unpatched Vulnerability : CVE-2017-16353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because ...

Linux Distros Unpatched Vulnerability : CVE-2017-18220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c...

Linux Distros Unpatched Vulnerability : CVE-2018-18544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in...