Medium severity4.0NVD Advisory· Published Apr 9, 2025· Updated Jun 17, 2026
CVE-2025-32460
CVE-2025-32460
Description
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*range: <1.3.46
- (no CPE)range: <8e56520
- (no CPE)range: 0
- osv-coords7 versionspkg:apk/chainguard/graphicsmagickpkg:apk/chainguard/graphicsmagick-devpkg:apk/wolfi/graphicsmagickpkg:apk/wolfi/graphicsmagick-devpkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/GraphicsMagick&distro=openSUSE%20Tumbleweedpkg:rpm/suse/GraphicsMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6
< 1.3.46-r0+ 6 more
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.46-r0
- (no CPE)range: < 1.3.42-150600.3.7.1
- (no CPE)range: < 1.3.45-3.1
- (no CPE)range: < 1.3.42-150600.3.7.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.