A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named 627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4592-1 advisory.

    This update for GraphicsMagick fixes the following issue:

    - CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which     are self-       referencing (bsc#1283767).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the
    function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a
    manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named
    627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early,
    responded in a very professional manner and quickly released a fixed version of the affected product.
    (CVE-2026-103118)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the     function ExtractPostscript of the file coders/wpg.c of the component WPG File Handler. Performing a     manipulation results in uncontrolled recursion. The attack may be initiated remotely. The patch is named     627b5b1b2fc2. It is suggested to install a patch to address this issue. The vendor was contacted early,     responded in a very professional manner and quickly released a fixed version of the affected product.
    (CVE-2026-103118)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
369267	SUSE SLES15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2026:4592-1)	Nessus	SuSE Local Security Checks	Local	medium
474760	Echo: graphicsmagick: security update to 1.4+really1.3.48-2	Tenable Cloud Security	Echo Local Security Checks	Local	medium
474760	Echo: graphicsmagick: security update to 1.4+really1.3.48-2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
358408	Linux Distros Unpatched Vulnerability : CVE-2026-103118	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-103118

medium

Tenable Plugins

medium

medium

medium

medium