5.3
CVE-2026-103118
- EPSS 0.29%
- Veröffentlicht 30.09.2026 13:30:05
- Zuletzt bearbeitet 02.10.2026 17:17:01
- Erkennungen
GraphicsMagick WPG File wpg.c ExtractPostscript recursion
A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellern/a
≫
Produkt
GraphicsMagick
Version
1.3.0
Status
affected
Version
1.3.1
Status
affected
Version
1.3.2
Status
affected
Version
1.3.3
Status
affected
Version
1.3.4
Status
affected
Version
1.3.5
Status
affected
Version
1.3.6
Status
affected
Version
1.3.7
Status
affected
Version
1.3.8
Status
affected
Version
1.3.9
Status
affected
Version
1.3.10
Status
affected
Version
1.3.11
Status
affected
Version
1.3.12
Status
affected
Version
1.3.13
Status
affected
Version
1.3.14
Status
affected
Version
1.3.15
Status
affected
Version
1.3.16
Status
affected
Version
1.3.17
Status
affected
Version
1.3.18
Status
affected
Version
1.3.19
Status
affected
Version
1.3.20
Status
affected
Version
1.3.21
Status
affected
Version
1.3.22
Status
affected
Version
1.3.23
Status
affected
Version
1.3.24
Status
affected
Version
1.3.25
Status
affected
Version
1.3.26
Status
affected
Version
1.3.27
Status
affected
Version
1.3.28
Status
affected
Version
1.3.29
Status
affected
Version
1.3.30
Status
affected
Version
1.3.31
Status
affected
Version
1.3.32
Status
affected
Version
1.3.33
Status
affected
Version
1.3.34
Status
affected
Version
1.3.35
Status
affected
Version
1.3.36
Status
affected
Version
1.3.37
Status
affected
Version
1.3.38
Status
affected
Version
1.3.39
Status
affected
Version
1.3.40
Status
affected
Version
1.3.41
Status
affected
Version
1.3.42
Status
affected
Version
1.3.43
Status
affected
Version
1.3.44
Status
affected
Version
1.3.45
Status
affected
Version
1.3.46
Status
affected
Version
1.3.47
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.29% | 0.199 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 5.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
|
| cna@vuldb.com | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-404 Improper Resource Shutdown or Release
The product does not release or incorrectly releases a resource before it is made available for re-use.
CWE-674 Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
https://vuldb.com/vuln/411874
https://vuldb.com/vuln/411874/cti
https://vuldb.com/cve/CVE-2026-103118
https://vuldb.com/submit/954970
https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/627b5b1b2fc2