CVE-2026-48734
ImageMagick: ImageMagick: Denial of Service via crafted MVG file leading to stack overflow
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 11, 2026
Updated · August 18, 2026
Description
A flaw was found in ImageMagick. A remote attacker could exploit this vulnerability by tricking a user into processing a specially crafted MVG (Magick Vector Graphics) file. This could lead to a stack overflow due to a missing depth or visited-set check, resulting in a denial of service (DoS) for the affected system.
Statement
This Moderate-severity flaw in ImageMagick requires user interaction, as an attacker must trick a user into processing a specially crafted MVG file. Successful exploitation could lead to a denial of service due to a stack overflow, impacting the availability of systems processing untrusted image data.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-770 · Allocation of Resources Without Limits or Throttling