https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 01:43:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-103118 <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.</p> <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.</p> https://db.gcve.eu/vuln/fkie_cve-2026-103118 https://db.gcve.eu/vuln/ghsa-4c5c-7x65-ccwp <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.</p> <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.</p> https://db.gcve.eu/vuln/ghsa-4c5c-7x65-ccwp https://db.gcve.eu/vuln/oesa-2026-4269 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: GraphicsMagick</p> <p>GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler&amp;amp;apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP. Security Fix(es):</p> <p>ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.(CVE-2025-55154)</p> <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.(CVE-2026-103118)</p> <p>ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arb…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: GraphicsMagick</p> <p>GraphicsMagick is the swiss army knife of image processing. Comprised of 267K physical lines (according to David A. Wheeler&amp;amp;apos;s SLOCCount) of source code in the base package (or 1,225K including 3rd party libraries) it provides a robust and efficient collection of tools and libraries which support reading, writing, and manipulating an image in over 89 major formats including important formats like DPX, GIF, JPEG, JPEG-2000, PNG, PDF, PNM, TIFF, and WebP. Security Fix(es):</p> <p>ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.(CVE-2025-55154)</p> <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.(CVE-2026-103118)</p> <p>ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arb…</p> https://db.gcve.eu/vuln/oesa-2026-4269 https://db.gcve.eu/vuln/opensuse-su-2026:12089-1 <p>GraphicsMagick-1.3.48-3.1 on GA media</p> <p>GraphicsMagick-1.3.48-3.1 on GA media</p> https://db.gcve.eu/vuln/opensuse-su-2026:12089-1 https://db.gcve.eu/vuln/ubuntu-cve-2026-103118 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: graphicsmagick, Ubuntu:Pro:16.04:LTS: graphicsmagick, Ubuntu:Pro:18.04:LTS: graphicsmagick, Ubuntu:Pro:20.04:LTS: graphicsmagick, Ubuntu:Pro:22.04:LTS: graphicsmagick, Ubuntu:Pro:24.04:LTS: graphicsmagick, Ubuntu:26.04:LTS: graphicsmagick</p> <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: graphicsmagick, Ubuntu:Pro:16.04:LTS: graphicsmagick, Ubuntu:Pro:18.04:LTS: graphicsmagick, Ubuntu:Pro:20.04:LTS: graphicsmagick, Ubuntu:Pro:22.04:LTS: graphicsmagick, Ubuntu:Pro:24.04:LTS: graphicsmagick, Ubuntu:26.04:LTS: graphicsmagick</p> <p>A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-103118