CVE-2026-103118 | GraphicsMagick up to 1.3.47 WPG File coders/wpg.c ExtractPostscript recursion (627b5b1b2fc2)

A vulnerability was found in GraphicsMagick up to 1.3.47. It has been rated as problematic. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion.

This vulnerability was named CVE-2026-103118. The attack may be initiated remotely. There is no available exploit.

It is suggested to install a patch to address this issue.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More