medium4.3
CVE-2026-103118
A vulnerability was detected in GraphicsMagick up to 1.3.47.
Impact
A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected products
| Product | Affected versions |
|---|---|
| GraphicsMagick | before 1.3.47. |
Versions were read from the advisory text. No structured product data has been published for this record yet.