Summary
It was discovered that GraphicsMagick did not properly limit image
dimensions, which could lead to excessive memory consumption. An attacker
could possibly use this issue to cause a denial of service.
(CVE-2025-27795)
It was discovered that GraphicsMagick did not properly handle certain
memory operations, which could lead to a out-of-bounds memory access. An
attacker could possibly use this issue to leak sensitive information.
This issue only affected Ubuntu 24.10. (CVE-2025-27796)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | graphicsmagick | 1.4+really1.3.38-1ubuntu0.1+esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | graphicsmagick | 1.4+really1.3.42-1.1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Medium 4.3
ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.