Buffer Allocation Vulnerability in GraphicsMagick Affects Multiple Versions
CVE-2025-27796

4.5MEDIUM

Key Information:

Vendor: Graphicsmagick
Status: Graphicsmagick
Vendor: CVE Published:; 7 March 2025

🔔 Create Graphicsmagick Vulnerability Alert

What is CVE-2025-27796?

A vulnerability in GraphicsMagick allows for improper handling of palette buffer allocation, potentially leading to unexpected behaviors or exploitation pathways. This issue is present in versions prior to 1.3.46 and can impact the security and stability of applications utilizing this image processing library. Users are advised to update to the latest version to mitigate associated risks.

Affected Version(s)

GraphicsMagick 0 < 1.3.46

References

https://foss.heptapod.net/graphicsmagick/graphicsmagick/-...

http://www.graphicsmagick.org/NEWS.html

https://sourceforge.net/p/graphicsmagick/bugs/750/

CVSS V3.1

Score:

4.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

None

User Interaction:

None

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 7, 2025
Vulnerability Reserved
Mar 7, 2025

CVE-2025-27796 Data

JSON