CVE-2015-7982
Command Injection in gm
Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare(), which fails to sanitize input correctly before calling the graphics magic binary.
Recommendation
Update to version 1.21.1 or later.
What each source reports
GitHub AdvisoriesGHSA-pjh3-jv7w-9jpr No score
Command Injection in gm
Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare(), which fails to sanitize input correctly before calling the graphics magic binary.
Recommendation
Update to version 1.21.1 or later.
- Record
GHSA-pjh3-jv7w-9jpr- Weakness
- CWE-77
- Updated
- 2026-11-02
OSVGHSA-pjh3-jv7w-9jpr No score
Command Injection in gm
Versions of gm prior to 1.21.1 are affected by a command injection vulnerability. The vulnerability is triggered when user input is passed into gm.compare(), which fails to sanitize input correctly before calling the graphics magic binary.
Recommendation
Update to version 1.21.1 or later.
- Record
GHSA-pjh3-jv7w-9jpr- Weakness
- CWE-77
- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-7982 is a vulnerability with no CVSS score yet in gm, published September 1, 2020. No source lists public exploit code. Fixed in gm 1.21.1.