p PatchFirst

PatchFirst · Latest vulnerabilities

graphicsmagick vulnerabilities

Vulnerabilities published for graphicsmagick in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 5

  1. CVE-2026-103118

    Medium · CVSS 5.3EPSS 0.29%No fix published

    GraphicsMagick WPG File wpg.c ExtractPostscript recursion

    A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

    graphicsmagickOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2025-12474

    Low · CVSS 2.3EPSS 0.11%No fix published

    libjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling

    A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.

    graphicsmagickOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →