UBUNTU-CVE-2026-13606
[Unknown description]
PatchFirst · Свежие уязвимости
За последние 30 дней в graphicsmagick опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 4
[Unknown description]
A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated) memory. This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches. An incorrect optimization causes the decoder to omit populating those areas.
GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.
There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.