Vulnerability in GraphicsMagick

[ Description ]Official description

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• BSI CERT-Bund30 Sep 2026WID-SEC-2026-3677

  GraphicsMagick: Vulnerability allows denial of service Translated from German

  Risk lowCVE-2026-103118

[ References ]References

• foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/627b5b1b2fc2
• vuldb.com/cve/CVE-2026-103118
• vuldb.com/submit/954970
• vuldb.com/vuln/411874
• vuldb.com/vuln/411874/cti