GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-perlUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-develUpgrade GraphicsMagick-docUpgrade GraphicsMagick | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade GraphicsMagick-c++-debuginfoUpgrade GraphicsMagick-debuginfoUpgrade GraphicsMagick-debugsourceUpgrade GraphicsMagick-perl-debuginfoUpgrade GraphicsMagick-perlUpgrade GraphicsMagickUpgrade GraphicsMagick-c++Upgrade GraphicsMagick-c++-develUpgrade GraphicsMagick-docUpgrade GraphicsMagick-devel | Sep 30, 2025 | Apr 9, 2025 |
| Debian | — | Upgrade graphicsmagick | Apr 21, 2025 | Apr 9, 2025 |
| Suse | — | Upgrade libgraphicsmagickwand-q16-2Upgrade perl-GraphicsMagickUpgrade graphicsmagick-develUpgrade GraphicsMagickUpgrade libgraphicsmagick3-configUpgrade libgraphicsmagick-q16-12Upgrade libgraphicsmagick-develUpgrade libgraphicsmagick-q16-3 | Dec 5, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub