CVE-2025-32460

{"id": "CVE-2025-32460", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.5}]}, "published": "2025-04-09T02:15:15.137", "references": [{"url": "https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/8e56520435df50f618a03f2721a39a70a515f1cb", "source": "cve@mitre.org"}, {"url": "https://issues.oss-fuzz.com/issues/406320404", "source": "cve@mitre.org"}, {"url": "https://tracker.debian.org/news/1636753/accepted-graphicsmagick-14really1345hg17696-1-source-into-unstable/", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call."}, {"lang": "es", "value": "GraphicsMagick anterior a 8e56520 tiene una sobrelectura de b\u00fafer basada en mont\u00f3n en ReadJXLImage en coders/jxl.c, relacionada con una llamada ImportViewPixelArea."}], "lastModified": "2025-04-09T20:02:41.860", "sourceIdentifier": "cve@mitre.org"}