All vulnerabilities
CVE-2026-103118

GraphicsMagick WPG File wpg.c ExtractPostscript recursion

n/a GraphicsMagick
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.29%Chance of exploitation activity in the next 30 days, higher than 20% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published30 Sep 2026Updated 2 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Text from CVE List

Affected versions 30

  • GraphicsMagickaffected: 1.3.0CVE List
  • GraphicsMagickaffected: 1.3.1CVE List
  • GraphicsMagickaffected: 1.3.2CVE List
  • GraphicsMagickaffected: 1.3.3CVE List
  • GraphicsMagickaffected: 1.3.4CVE List
  • GraphicsMagickaffected: 1.3.5CVE List
  • GraphicsMagickaffected: 1.3.6CVE List
  • GraphicsMagickaffected: 1.3.7CVE List
  • GraphicsMagickaffected: 1.3.8CVE List
  • GraphicsMagickaffected: 1.3.9CVE List
  • GraphicsMagickaffected: 1.3.10CVE List
  • GraphicsMagickaffected: 1.3.11CVE List
  • GraphicsMagickaffected: 1.3.12CVE List
  • GraphicsMagickaffected: 1.3.13CVE List
  • GraphicsMagickaffected: 1.3.14CVE List
  • GraphicsMagickaffected: 1.3.15CVE List
  • GraphicsMagickaffected: 1.3.16CVE List
  • GraphicsMagickaffected: 1.3.17CVE List
  • GraphicsMagickaffected: 1.3.18CVE List
  • GraphicsMagickaffected: 1.3.19CVE List
  • GraphicsMagickaffected: 1.3.20CVE List
  • GraphicsMagickaffected: 1.3.21CVE List
  • GraphicsMagickaffected: 1.3.22CVE List
  • GraphicsMagickaffected: 1.3.23CVE List
  • GraphicsMagickaffected: 1.3.24CVE List
  • GraphicsMagickaffected: 1.3.25CVE List
  • GraphicsMagickaffected: 1.3.26CVE List
  • GraphicsMagickaffected: 1.3.27CVE List
  • GraphicsMagickaffected: 1.3.28CVE List
  • GraphicsMagickaffected: 1.3.29CVE List

References 5