vulnerability
Amazon Linux 2023: CVE-2025-27796: Medium priority package update for GraphicsMagick
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:L/AC:M/Au:N/C:N/I:P/A:P) | Mar 7, 2025 | Sep 30, 2025 | Sep 30, 2025 |
Severity
3
CVSS
(AV:L/AC:M/Au:N/C:N/I:P/A:P)
Published
Mar 7, 2025
Added
Sep 30, 2025
Modified
Sep 30, 2025
Description
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
Solutions
amazon-linux-2023-upgrade-graphicsmagickamazon-linux-2023-upgrade-graphicsmagick-camazon-linux-2023-upgrade-graphicsmagick-c-debuginfoamazon-linux-2023-upgrade-graphicsmagick-c-develamazon-linux-2023-upgrade-graphicsmagick-debuginfoamazon-linux-2023-upgrade-graphicsmagick-debugsourceamazon-linux-2023-upgrade-graphicsmagick-develamazon-linux-2023-upgrade-graphicsmagick-docamazon-linux-2023-upgrade-graphicsmagick-perlamazon-linux-2023-upgrade-graphicsmagick-perl-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.