UBUNTU-CVE-2026-13606
[Unknown description]
Published Updated
PatchFirst · Latest vulnerabilities
graphicsmagick vulnerabilities
Vulnerabilities published for graphicsmagick in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
Published UpdatedCVE-2025-32460
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
Published UpdatedCVE-2017-13736
There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.