GraphicsMagick (SUSE:Linux Enterprise Module for Package Hub 15 SP6) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Package Hub 15 SP6 package GraphicsMagick, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-27795 — CVSS 4.3 (medium): ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
• CVE-2025-32460 — CVSS 4.0 (medium): GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call.