medium4.5
CVE-2025-27796
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
Impact
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Graphicsmagick | Graphicsmagick | before 1.3.46 |