Stack Overflow Vulnerability in ImageMagick Products
CVE-2026-116144
4.8MEDIUM
What is CVE-2026-116144?
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 are susceptible to a vulnerability that allows for uncontrolled recursion in the MVG decoder. An attacker can craft a malicious MVG file that, when processed with specific arguments, may lead to a stack overflow, ultimately crashing the application and resulting in a denial of service condition. This vulnerability highlights the importance of handling inputs securely to prevent exploitation.
Affected Version(s)
ImageMagick 7.0.0-0 < 7.1.2-33
ImageMagick 0 < 6.9.13-58
ImageMagick 7.1.2-33