UBUNTU-CVE-2026-13606
[Unknown description]
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour graphicsmagick au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 4
[Unknown description]
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.