https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:22:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-359609 EUVD-2026-359609 https://cve.radiocsirt.org/vuln/euvd-2026-359609 https://cve.radiocsirt.org/vuln/fkie_cve-2026-77118 <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input.</p> <p>A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.</p> <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input.</p> <p>A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-77118 https://cve.radiocsirt.org/vuln/ghsa-qjrj-qxx7-fc4j <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input.</p> <p>A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.</p> <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input.</p> <p>A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.</p> https://cve.radiocsirt.org/vuln/ghsa-qjrj-qxx7-fc4j https://cve.radiocsirt.org/vuln/oesa-2026-3656 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: GraphicsMagick, openEuler:22.03-LTS-SP4: GraphicsMagick, openEuler:24.03-LTS-SP1: GraphicsMagick, openEuler:24.03-LTS-SP3: GraphicsMagick, openEuler:24.03-LTS-SP4: GraphicsMagick</p> <p>GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. Security Fix(es):</p> <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input. A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.(CVE-2026-77118)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: GraphicsMagick, openEuler:22.03-LTS-SP4: GraphicsMagick, openEuler:24.03-LTS-SP1: GraphicsMagick, openEuler:24.03-LTS-SP3: GraphicsMagick, openEuler:24.03-LTS-SP4: GraphicsMagick</p> <p>GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software. Security Fix(es):</p> <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input. A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.(CVE-2026-77118)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3656 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-77118 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: graphicsmagick, Ubuntu:Pro:16.04:LTS: graphicsmagick, Ubuntu:Pro:18.04:LTS: graphicsmagick, Ubuntu:Pro:20.04:LTS: graphicsmagick, Ubuntu:Pro:22.04:LTS: graphicsmagick, Ubuntu:Pro:24.04:LTS: graphicsmagick, Ubuntu:26.04:LTS: graphicsmagick</p> <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input. A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: graphicsmagick, Ubuntu:Pro:16.04:LTS: graphicsmagick, Ubuntu:Pro:18.04:LTS: graphicsmagick, Ubuntu:Pro:20.04:LTS: graphicsmagick, Ubuntu:Pro:22.04:LTS: graphicsmagick, Ubuntu:Pro:24.04:LTS: graphicsmagick, Ubuntu:26.04:LTS: graphicsmagick</p> <p>A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick. In DecodeImage() (coders/pcd.c), the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is repositioned only when a sync marker introduces a new plane/row; between sync markers the run length is bounded solely by the input. A crafted PCD file that positions the pointer near the end of a plane and then supplies a long run of deltas with no intervening sync therefore walks the pointer past the end of the allocation and writes through it. Processing an untrusted PCD file — for example with gm convert or gm identify, or through any application linked against libGraphicsMagick — can corrupt heap memory beyond the buffers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-77118