mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-10 00:04:06 -09:00
Fixes the following vulnerability:
- CVE-2025-27796:
ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette
buffer allocation, resulting in out-of-bounds access to heap memory in
ReadBlob.
For more information, see
- https://www.cve.org/CVERecord?id=CVE-2025-27796
- https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/883ebf8cae6dfa5873d975fe3476b1a188ef3
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>