Medium severity4.5NVD Advisory· Published Mar 7, 2025· Updated Jun 17, 2026
CVE-2025-27796
CVE-2025-27796
Description
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*range: <1.3.46
- (no CPE)range: <1.3.46
- (no CPE)range: 0
- osv-coords12 versionspkg:apk/chainguard/graphicsmagickpkg:apk/chainguard/graphicsmagick-compatpkg:apk/chainguard/graphicsmagick-cpppkg:apk/chainguard/graphicsmagick-devpkg:apk/chainguard/graphicsmagick-docpkg:apk/wolfi/graphicsmagickpkg:apk/wolfi/graphicsmagick-compatpkg:apk/wolfi/graphicsmagick-cpppkg:apk/wolfi/graphicsmagick-devpkg:apk/wolfi/graphicsmagick-docpkg:deb/ubuntu/[email protected]+really1.3.45-1ubuntu0.1?arch=source&distro=oracularpkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweed
< 1.3.46-r0+ 11 more
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.4+really1.3.45-1ubuntu0.1
- (no CPE)range: < 1.3.45-2.1
Patches
Vulnerability mechanics
References
3- foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/883ebf8cae6dfa5873d975fe3476b1a188ef3f9fnvdPatch
- www.graphicsmagick.org/NEWS.htmlnvdRelease Notes
- sourceforge.net/p/graphicsmagick/bugs/750/nvdPermissions Required
News mentions
0No linked articles in our index yet.