GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade GraphicsMagick-docUpgrade GraphicsMagick-develUpgrade GraphicsMagick-c++Upgrade GraphicsMagickUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-c++-debuginfoUpgrade GraphicsMagick-perl-debuginfoUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-develUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-docUpgrade GraphicsMagickUpgrade GraphicsMagick-perl | Sep 30, 2025 | Apr 9, 2025 |
| Debian | — | Upgrade graphicsmagick | Apr 21, 2025 | Apr 9, 2025 |
| Suse | — | Upgrade libgraphicsmagick-q16-3Upgrade GraphicsMagickUpgrade libgraphicsmagick-develUpgrade libgraphicsmagick-q16-12Upgrade libgraphicsmagick3-configUpgrade graphicsmagick-develUpgrade libgraphicsmagickwand-q16-2Upgrade perl-GraphicsMagick | Dec 5, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub