ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
CVSS Details
- CVSS 3.1 Base Score: 4.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade GraphicsMagick-perlUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-docUpgrade GraphicsMagickUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-develUpgrade GraphicsMagick-c++ | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade GraphicsMagick-develUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-perl-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagickUpgrade GraphicsMagick-c++-debuginfoUpgrade GraphicsMagick-doc | Sep 30, 2025 | Mar 7, 2025 |
| Debian | — | Upgrade graphicsmagick | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade graphicsmagick (Ubuntu Pro)Upgrade graphicsmagick | Apr 15, 2025 | Mar 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub