CVE-2026-55577
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk13th percentile — higher than 13% of all known CVEs
Summary
In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out-of-bounds write when processing a crafted image.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or cause a system crash, threatening data confidentiality, integrity, and availability.
Recommendation
Immediately update ImageMagick to version 6.9.13-51 or 7.1.2-26, and consider restricting image processing from untrusted sources.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.