Medium severity4.3NVD Advisory· Published Mar 7, 2025· Updated Jun 17, 2026
CVE-2025-27795
CVE-2025-27795
Description
ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*range: <1.3.46
- (no CPE)range: <1.3.46
- (no CPE)range: 0
- osv-coords13 versionspkg:apk/chainguard/graphicsmagickpkg:apk/chainguard/graphicsmagick-compatpkg:apk/chainguard/graphicsmagick-cpppkg:apk/chainguard/graphicsmagick-devpkg:apk/chainguard/graphicsmagick-docpkg:apk/wolfi/graphicsmagickpkg:apk/wolfi/graphicsmagick-compatpkg:apk/wolfi/graphicsmagick-cpppkg:apk/wolfi/graphicsmagick-devpkg:apk/wolfi/graphicsmagick-docpkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweedpkg:rpm/suse/GraphicsMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
< 1.3.46-r0+ 12 more
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.42-150600.3.4.1
- (no CPE)range: < 1.3.45-2.1
- (no CPE)range: < 1.3.42-150600.3.4.1
Patches
Vulnerability mechanics
References
5- foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/9bbae7314e3c3b19b830591010ed90bb136b9c42nvdPatch
- www.graphicsmagick.org/NEWS.htmlnvdRelease Notes
- github.com/libjxl/libjxl/issues/3792nvdIssue Tracking
- github.com/libjxl/libjxl/issues/3793nvdIssue Tracking
- issues.oss-fuzz.com/issues/42536330nvdIssue Tracking
News mentions
0No linked articles in our index yet.