Skip to main content

ImageMagick CVE-2026-55577

| EUVDEUVD-2026-41121 MEDIUM
Improper Check for Unusual or Exceptional Conditions (CWE-754)
2026-07-01 GitHub_M
Buffer Overflow Imagemagick Red Hat Suse
5.9
CVSS 3.1 · Vendor: GitHub_M
Share

Severity by source

Vendor (GitHub_M) PRIMARY
5.9 MEDIUM
AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.9 MEDIUM

Network vector reflects attacker-supplied image ingestion; AC:H for required precise crafting; availability-only impact per CVE description with no confirmed code execution.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.9 MEDIUM
qualitative

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Patch available
Jul 01, 2026 - 20:02 EUVD
Analysis Generated
Jul 01, 2026 - 19:37 vuln.today

DescriptionCVE.org

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-51 and 7.1.2-26.

AnalysisAI

Heap buffer overflow in ImageMagick's MVG decoder allows remote unauthenticated attackers to trigger an out-of-bounds write by supplying a specially crafted image file, resulting in denial of service. Affected are all ImageMagick deployments prior to versions 6.9.13-51 (legacy v6 branch) and 7.1.2-26 (current v7 branch). No public exploit code or active exploitation has been identified at time of analysis; however, the network-accessible vector and zero-privilege requirement make this relevant for any service that accepts and processes user-supplied images.

Technical ContextAI

ImageMagick is a widely-used open-source image manipulation library and CLI toolset. The MVG (Magick Vector Graphics) decoder is an internal format parser used to handle vector graphics instructions embedded in or alongside raster images. The root cause is classified as CWE-754 (Improper Check for Unusual or Exceptional Conditions): the MVG decoder fails to validate exceptional input states during parsing, allowing heap memory beyond the allocated buffer to be written. This is a classic heap buffer overflow (CWE-122 is the more specific child, but CWE-754 identifies the inadequate guard check as the root cause). The affected CPE is cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:* covering both the v6 and v7 release lines prior to the fixed versions. Because ImageMagick is frequently invoked by web applications, CMS platforms, and image pipelines as a backend processor, the network attack vector arises from attacker-controlled images flowing into the library rather than a direct network socket on ImageMagick itself.

RemediationAI

Upgrade ImageMagick to version 6.9.13-51 or later on the v6 branch, or to 7.1.2-26 or later on the v7 branch. These are vendor-confirmed fix versions per the GitHub Security Advisory GHSA-wx47-rm3x-jx6p (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wx47-rm3x-jx6p). If immediate patching is not possible, a compensating control is to disable or block MVG format processing by adding a policy denial for the MVG coder in ImageMagick's policy.xml file (e.g., adding '<policy domain="coder" rights="none" pattern="MVG" />' under the policymap element); note this will prevent processing of any MVG-format input and may break workflows that depend on that format. Additionally, restricting the file types accepted by any upstream application layer (e.g., allowlisting only JPEG/PNG/GIF before passing to ImageMagick) reduces the attack surface without requiring a policy change, though this is defense-in-depth rather than a full fix.

More in Imagemagick

View all
CVE-2017-15277 MEDIUM POC
6.5 Oct 12

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when proc
CVE-2016-5841 CRITICAL POC
9.8 Dec 13

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of serv
CVE-2016-3717 MEDIUM POC
5.5 May 05

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files vi
CVE-2016-5118 CRITICAL
9.8 Jun 10

The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbit
CVE-2016-5689 CRITICAL POC
9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
CVE-2016-5690 CRITICAL POC
9.8 Dec 13

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to

CVE-2016-5691 CRITICAL POC
9.8 Dec 13

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact b
CVE-2017-14138 CRITICAL POC
9.8 Sep 04

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in cer
CVE-2026-23876 CRITICAL POC
9.8 Jan 20

Heap buffer overflow in ImageMagick's XBM image decoder (ReadXBMImage) lets remote attackers write attacker-controlled d
CVE-2023-34152 CRITICAL POC
9.8 May 30

A vulnerability was found in ImageMagick. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable
CVE-2019-19952 CRITICAL POC
9.8 Dec 24

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to R
CVE-2018-14551 CRITICAL POC
9.8 Jul 23

The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory cor

Same weakness CWE-754 – Improper Check for Unusual or Exceptional Conditions

View all
CVE-2024-4367 HIGH POC
8.8
CVE-2017-11144 HIGH
7.5
CVE-2026-24054 CRITICAL POC
10.0
CVE-2023-37303 CRITICAL POC
9.8
CVE-2017-17085 HIGH POC
7.5
CVE-2020-6385 HIGH POC
8.8
CVE-2023-21102 HIGH POC
7.8
CVE-2021-29607 HIGH POC
7.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected
SUSE Linux Enterprise Module for Desktop Applications 15 SP7 Not-Affected
SUSE Linux Enterprise Module for Development Tools 15 SP7 Not-Affected

Share

CVE-2026-55577 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy