Resource Limit Flaw in GraphicsMagick Affects Image Processing
CVE-2025-27795

4.3MEDIUM

Key Information:

Vendor

Graphicsmagick

Status
Graphicsmagick
Vendor
CVE Published:
7 March 2025

What is CVE-2025-27795?

GraphicsMagick, a widely-used image processing library, prior to version 1.3.46, contains a vulnerability due to insufficient resource limits for image dimensions. This flaw exposes systems to potential risks as it allows attackers to manipulate image dimensions, potentially leading to denial of service or other unintended behaviors.

Affected Version(s)

GraphicsMagick 0 < 1.3.46

References

http://www.graphicsmagick.org/NEWS.html
https://foss.heptapod.net/graphicsmagick/graphicsmagick/-...
https://issues.oss-fuzz.com/issues/42536330#comment6

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.