vulnerability

Amazon Linux 2023: CVE-2025-32460: Medium priority package update for GraphicsMagick

Severity
2
CVSS
(AV:L/AC:L/Au:N/C:N/I:P/A:N)
Published
Apr 9, 2025
Added
Sep 30, 2025
Modified
Sep 30, 2025

Description

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.

Solutions

amazon-linux-2023-upgrade-graphicsmagickamazon-linux-2023-upgrade-graphicsmagick-camazon-linux-2023-upgrade-graphicsmagick-c-debuginfoamazon-linux-2023-upgrade-graphicsmagick-c-develamazon-linux-2023-upgrade-graphicsmagick-debuginfoamazon-linux-2023-upgrade-graphicsmagick-debugsourceamazon-linux-2023-upgrade-graphicsmagick-develamazon-linux-2023-upgrade-graphicsmagick-docamazon-linux-2023-upgrade-graphicsmagick-perlamazon-linux-2023-upgrade-graphicsmagick-perl-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.