CVE Vulnerabilities

CVE-2025-27796

Use of Uninitialized Resource

Published: Mar 07, 2025 | Modified: Mar 07, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.

Weakness

The product uses or accesses a resource that has not been initialized.

Potential Mitigations

References