Heap-based Buffer Over-read in GraphicsMagick Product by GraphicsMagick

CVE-2025-32460

What is CVE-2025-32460?

The vulnerability in GraphicsMagick prior to the specified commit introduces a heap-based buffer over-read during the processing of JXL images. This issue arises in the ReadJXLImage function within coders/jxl.c, specifically linked to the ImportViewPixelArea call. This can lead to potential data exposure or other unintended consequences, emphasizing the importance of patching to the latest version to maintain security.

References