{"id":"JLSEC-2026-495","summary":"GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in `coders/jxl.c`,...","details":"GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in `coders/jxl.c`, related to an ImportViewPixelArea call.","modified":"2026-07-25T18:24:31.579675652Z","published":"2026-05-13T01:42:44.063Z","upstream":["CVE-2025-32460","GHSA-hf7q-qx98-4hm7","EUVD-2025-10418"],"database_specific":{"sources":[{"imported":"2026-07-17T22:00:36.328Z","modified":"2026-06-17T09:12:01.780Z","published":"2025-04-09T02:15:15.137Z","url":"https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2025-32460","html_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32460","database_specific":{"status":"Analyzed"},"id":"CVE-2025-32460"},{"url":"https://api.github.com/advisories/GHSA-hf7q-qx98-4hm7","html_url":"https://github.com/advisories/GHSA-hf7q-qx98-4hm7","id":"GHSA-hf7q-qx98-4hm7","imported":"2026-07-17T22:00:36.476Z","modified":"2025-04-09T04:18:30Z","published":"2025-04-09T04:18:20Z"},{"imported":"2026-07-17T22:00:41.846Z","modified":"2025-04-09T19:27:10Z","published":"2025-04-09T00:00:00Z","url":"https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2025-10418","html_url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-10418","id":"EUVD-2025-10418"}],"license":"CC-BY-4.0"},"references":[{"type":"WEB","url":"https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/8e56520435df50f618a03f2721a39a70a515f1cb"},{"type":"WEB","url":"https://github.com/advisories/GHSA-hf7q-qx98-4hm7"},{"type":"WEB","url":"https://issues.oss-fuzz.com/issues/406320404"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32460"},{"type":"WEB","url":"https://tracker.debian.org/news/1636753/accepted-graphicsmagick-14really1345hg17696-1-source-into-unstable"},{"type":"WEB","url":"https://tracker.debian.org/news/1636753/accepted-graphicsmagick-14really1345hg17696-1-source-into-unstable/"}],"affected":[{"package":{"name":"GraphicsMagick_jll","ecosystem":"Julia","purl":"pkg:julia/GraphicsMagick_jll?uuid=aa65733b-c888-5e24-8545-c87abc10c960"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.3.47+0"}]}],"database_specific":{"source":"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-495.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}]}