CVE-2025-27795

MEDIUM

GraphicsMagick < 1.3.46 - Denial of Service via JXL Image Dimension Resource Exhaustion

Title source: llm

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.

Core 5

Core References

Release Notes

Patch

Issue Tracking

Issue Tracking

Issue Tracking

CVSS v3 4.3

EPSS 0.0041

EPSS Percentile 32.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-770

Status published

Products (1)

graphicsmagick/graphicsmagick < 1.3.46

Published Mar 07, 2025

Tracked Since Feb 18, 2026