GGraphicsMagick

Products

Exploited and recent CVEs

• CVE-2025-32460 Medium 4.0 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. 0.4%
• CVE-2025-27795 Medium 4.3 ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. 0.4%
• CVE-2025-27796 Medium 4.5 ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob. 0.4%