Description (CNA)
A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / GraphicsMagick | affected 1.3.0; affected 1.3.1; affected 1.3.2; affected 1.3.3; affected 1.3.4; affected 1.3.5; affected 1.3.6; affected 1.3.7; affected 1.3.8; affected 1.3.9; affected 1.3.10; affected 1.3.11; affected 1.3.12; affected 1.3.13; affected 1.3.14; affected 1.3.15; affected 1.3.16; affected 1.3.17; affected 1.3.18; affected 1.3.19; affected 1.3.20; affected 1.3.21; affected 1.3.22; affected 1.3.23; affected 1.3.24; affected 1.3.25; affected 1.3.26; affected 1.3.27; affected 1.3.28; affected 1.3.29; affected 1.3.30; affected 1.3.31; affected 1.3.32; affected 1.3.33; affected 1.3.34; affected 1.3.35; affected 1.3.36; affected 1.3.37; affected 1.3.38; affected 1.3.39; affected 1.3.40; affected 1.3.41; affected 1.3.42; affected 1.3.43; affected 1.3.44; affected 1.3.45; affected 1.3.46; affected 1.3.47 |
CWE
CWE-674, CWE-404
References
- https://vuldb.com/vuln/411874
- https://vuldb.com/vuln/411874/cti
- https://vuldb.com/cve/CVE-2026-103118
- https://vuldb.com/submit/954970
- https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/627b5b1b2fc2
ADP enrichment
No English description supplied.
No references supplied.