PatchTheCVE: graphicsmagickhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-32460: GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to anhttps://patchthecve.com/cve/CVE-2025-32460.htmlhttps://patchthecve.com/cve/CVE-2025-32460.htmlWed, 17 Jun 2026 09:12:01 +0000MEDIUM 4.0: GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.CVE-2025-27796: ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-https://patchthecve.com/cve/CVE-2025-27796.htmlhttps://patchthecve.com/cve/CVE-2025-27796.htmlWed, 17 Jun 2026 09:04:14 +0000MEDIUM 4.5: ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.CVE-2025-27795: ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.https://patchthecve.com/cve/CVE-2025-27795.htmlhttps://patchthecve.com/cve/CVE-2025-27795.htmlWed, 17 Jun 2026 09:04:14 +0000MEDIUM 4.3: ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.