Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/graphicsmagick@0?distro=trixie
purl pkg:deb/debian/graphicsmagick@0?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-725n-u2ss-ayda ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795
VCID-9ty9-95mx-mfak GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. CVE-2025-32460
VCID-r2pq-4trw-13ab ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob. CVE-2025-27796

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:06:45.015204+00:00 Debian Importer Fixing VCID-9ty9-95mx-mfak https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:04:56.399561+00:00 Debian Importer Fixing VCID-r2pq-4trw-13ab https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:01:45.277396+00:00 Debian Importer Fixing VCID-725n-u2ss-ayda https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:16:52.731536+00:00 Debian Importer Fixing VCID-9ty9-95mx-mfak https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:31:32.581512+00:00 Debian Importer Fixing VCID-r2pq-4trw-13ab https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:43:34.358065+00:00 Debian Importer Fixing VCID-725n-u2ss-ayda https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:26:02.983646+00:00 Debian Importer Fixing VCID-9ty9-95mx-mfak https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:26:02.923750+00:00 Debian Importer Fixing VCID-r2pq-4trw-13ab https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:26:02.873318+00:00 Debian Importer Fixing VCID-725n-u2ss-ayda https://security-tracker.debian.org/tracker/data/json 38.1.0