ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade GraphicsMagick-c++Upgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-docUpgrade GraphicsMagickUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-develUpgrade GraphicsMagick-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade GraphicsMagick-perl-debuginfoUpgrade GraphicsMagickUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-c++-debuginfoUpgrade GraphicsMagick-docUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-devel | Sep 30, 2025 | Mar 7, 2025 |
| Debian | — | Upgrade graphicsmagick | Apr 21, 2025 | Mar 7, 2025 |
| Suse | — | Upgrade libgraphicsmagick-develUpgrade GraphicsMagickUpgrade perl-GraphicsMagickUpgrade graphicsmagick-develUpgrade libgraphicsmagick3-configUpgrade libgraphicsmagickwand-q16-2Upgrade libgraphicsmagick-q16-12Upgrade libgraphicsmagick-q16-3 | Dec 5, 2025 | Apr 3, 2025 |
| Ubuntu | — | Upgrade graphicsmagick (Ubuntu Pro)Upgrade graphicsmagick | Apr 15, 2025 | Mar 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub