5 matches found
Medium: GraphicsMagick
Issue Overview: ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795 ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob. CVE-2025-27796...
Updated graphicsmagick packages fix security vulnerabilities
ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795...
SUSE CVE-2025-27795
ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...
UBUNTU-CVE-2025-27795
ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits...
CVE-2025-27795
GraphicsMagick products affected: ReadJXLImage in JXL code path of GraphicsMagick before 1.3.46 lacks image dimension resource limits, per CVE-2025-27795. This can enable resource exhaustion/DoS when processing certain images. Advisories indicate upgrading to GraphicsMagick 1.3.46 or later to rem...