GHSA-h36c-3666-h489

ghsaUSosv

ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

view advisory published 2026-06-25Licence: CC-BY-4.0

A crafted MVG file could result in a stack overflow due to a missing depth or visited-set check.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-48734US	—	0.11% (1st)	—	2026-06-10
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file could result in a stack…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.