Bug 2543931 (CVE-2026-103118)

Summary:	CVE-2026-103118 GraphicsMagick: GraphicsMagick: Denial of Service via uncontrolled recursion in WPG file handler
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security <prodsec-ir-bot>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in GraphicsMagick. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by convincing a user or service to process a specially crafted WordPerfect Graphics (WPG) image file. Due to uncontrolled recursion within the WPG file handler's ExtractPostscript function, parsing the malicious input leads to stack exhaustion and crashes the application.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2543946, 2543947
Bug Blocks:

Description OSIDB Bzimport 2026-09-30 13:56:40 UTC

A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.