CVE Database›Document archive›CVE-2026-48734

CVE-2026-48734

ImageMagick: ImageMagick: Denial of Service via crafted MVG file leading to stack overflow

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · June 11, 2026

Updated · August 18, 2026

Description

A flaw was found in ImageMagick. A remote attacker could exploit this vulnerability by tricking a user into processing a specially crafted MVG (Magick Vector Graphics) file. This could lead to a stack overflow due to a missing depth or visited-set check, resulting in a denial of service (DoS) for the affected system.

Statement

This Moderate-severity flaw in ImageMagick requires user interaction, as an attacker must trick a user into processing a specially crafted MVG file. Successful exploitation could lead to a denial of service due to a stack overflow, impacting the availability of systems processing untrusted image data.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-770 · Allocation of Resources Without Limits or Throttling