Back to overview

CVE-2026-55577

MEDIUM
5.9
CVSS 3.1
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.

Metadata

CVE ID
CVE-2026-55577
State
PUBLISHED
Assigner
GitHub_M
Reserved
2026-06-16 23:11 UTC
Published
2026-07-01 18:56 UTC
Last updated
2026-07-01 19:24 UTC
Primary CWE
CWE-754
CWE-754: Improper Check for Unusual or Exceptional Condition…
Vendor / Product
ImageMagick / ImageMagick
Sources
cve.org  ·  NVD

Severity & Metrics

5.9 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
no
Tech. Impact
partial
Affected products (1)
VendorProductPlatformVersions
ImageMagick ImageMagick — >= 7.0.1-0, < 7.1.2-26, < 6.9.13-51
Weakness (CWE)
CWESourceDescription
CWE-754 cna CWE-754: Improper Check for Unusual or Exceptional Conditions
CWE-755 cna CWE-755: Improper Handling of Exceptional Conditions
CWE-787 cna CWE-787: Out-of-bounds Write
CVSS scores (1)
ScoreSeverityVersionSourceVector
5.9 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
References (1)
Back to overview