Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-27795

Fixed in a distro release EPSS <1%CVSS 4.3

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

Published 2025-03-07 · CVE record · OSV

Products: graphicsmagick

Distro releases

ReleasePackageFixed in
Amazon Linux 2023GraphicsMagick1.3.45-1.amzn2023.0.1
Amazon Linux 2023GraphicsMagick-c++1.3.45-1.amzn2023.0.1
Amazon Linux 2023GraphicsMagick-c++-devel1.3.45-1.amzn2023.0.1
Amazon Linux 2023GraphicsMagick-devel1.3.45-1.amzn2023.0.1
Amazon Linux 2023GraphicsMagick-doc1.3.45-1.amzn2023.0.1
Amazon Linux 2023GraphicsMagick-perl1.3.45-1.amzn2023.0.1
Chainguardgraphicsmagick-compat1.3.46-r0
Debian 12graphicsmagick1.4+really1.3.40-4+deb12u1
Debian 13graphicsmagick1.4+really1.3.45+hg17689-1
Debian 14graphicsmagick1.4+really1.3.45+hg17689-1
SUSE Linux Enterprise Module for Package Hub 15 SP6GraphicsMagick1.3.42-150600.3.4.1
Ubuntu Pro 22.04 LTSgraphicsmagick1.4+really1.3.38-1ubuntu0.1+esm1
Ubuntu Pro 24.04 LTSgraphicsmagick1.4+really1.3.42-1.1ubuntu0.1~esm1
Wolfigraphicsmagick-compat1.3.46-r0
openSUSE Leap 15.6GraphicsMagick1.3.42-150600.3.4.1
openSUSE TumbleweedGraphicsMagick1.3.45-2.1