GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-develUpgrade GraphicsMagickUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-doc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-develUpgrade GraphicsMagick-docUpgrade GraphicsMagickUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-perl-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-c++-debuginfo | Sep 30, 2025 | Apr 9, 2025 |
| Debian | — | Upgrade graphicsmagick | Apr 21, 2025 | Apr 9, 2025 |
| Suse | — | Upgrade perl-GraphicsMagickUpgrade libgraphicsmagickwand-q16-2Upgrade graphicsmagick-develUpgrade libgraphicsmagick-q16-3Upgrade GraphicsMagickUpgrade libgraphicsmagick-develUpgrade libgraphicsmagick-q16-12Upgrade libgraphicsmagick3-config | Dec 5, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub