Most recent entries from all

bdu:2025-03871

EUVD-2026-221361

fkie_cve-2025-27795

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

GHSA-69r2-5wxm-3hf6

JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

OESA-2025-1506 — GraphicsMagick security update

Affected: openEuler:20.03-LTS-SP4: GraphicsMagick, openEuler:22.03-LTS-SP3: GraphicsMagick, openEuler:22.03-LTS-SP4: GraphicsMagick, openEuler:24.03-LTS: GraphicsMagick, openEuler:24.03-LTS-SP1: GraphicsMagick

GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. Security Fix(es):

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.(CVE-2025-27795)

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.(CVE-2025-32460)

openSUSE-SU-2025:14949-1 — GraphicsMagick-1.3.45-2.1 on GA media

GraphicsMagick-1.3.45-2.1 on GA media

SUSE-SU-2025:1129-1 — Security update for GraphicsMagick

Security update for GraphicsMagick

UBUNTU-CVE-2025-27795

Affected: Ubuntu:Pro:22.04:LTS: graphicsmagick, Ubuntu:Pro:24.04:LTS: graphicsmagick

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

WID-SEC-W-2025-0501 — GraphicsMagick: Mehrere Schwachstellen ermöglichen Denial of Service und nicht spezifizierte Angriffe

Ein lokaler Angreifer kann mehrere Schwachstellen in GraphicsMagick ausnutzen, um einen Denial of Service zu verursachen oder einen nicht näher spezifizierten Angriff durchzuführen.