ByteOS Network

NVD Vulnerability Details :

CVE-2025-27796

Analyzed

Source-cve@mitre.org

Published At-07 Mar, 2025 | 06:15

Updated At-29 Jan, 2026 | 20:56

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	4.5	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 4.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

GraphicsMagick

>>graphicsmagick>>Versions before 1.3.46(exclusive)

cpe:2.3:a:graphicsmagick:graphicsmagick:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-908	Secondary	cve@mitre.org

CWE ID: CWE-908

Type: Secondary

Source: cve@mitre.org

References

Hyperlink	Source	Resource
http://www.graphicsmagick.org/NEWS.html	cve@mitre.org	Release Notes
https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/883ebf8cae6dfa5873d975fe3476b1a188ef3f9f	cve@mitre.org	Patch
https://sourceforge.net/p/graphicsmagick/bugs/750/	cve@mitre.org	Permissions Required

Hyperlink: http://www.graphicsmagick.org/NEWS.html

Source: cve@mitre.org

Resource:

Release Notes

Hyperlink: https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/883ebf8cae6dfa5873d975fe3476b1a188ef3f9f

Source: cve@mitre.org

Resource:

Patch

Hyperlink: https://sourceforge.net/p/graphicsmagick/bugs/750/

Source: cve@mitre.org

Resource:

Permissions Required

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History