CVE-2026-116144

A flaw was found in ImageMagick. An attacker could cause a Denial of Service DoS by supplying a specially crafted Magick Vector Graphics MVG file. When processed, the file triggers uncontrolled recursion within the MVG decoder, exhausting stack memory and causing the application to crash...

CVE-2026-116148

A flaw was found in ImageMagick. The Magick Vector Graphics MVG encoder does not properly neutralize user-specified drawing options before writing them into generated output. An attacker capable of supplying drawing options can exploit this vulnerability to inject arbitrary drawing commands into...

CVE-2026-109264

A flaw was found in ImageMagick. An attacker who controls a file name processed by the application can cause a Denial of Service DoS by crashing the process. This issue is caused by uncontrolled recursion within the Magick Vector Graphics MVG decoder, which exhausts available stack memory when...

CVE-2026-109275

A flaw was found in ImageMagick. When a PostScript renderer is enabled, a remote attacker can supply a specially crafted Magick Vector Graphics MVG file to inject code into the rendering process. Exploitation of this flaw may lead to arbitrary code execution or a denial of service on the host...

CVE-2026-106578

A flaw was found in ImageMagick. This vulnerability can lead to a Denial of Service DoS when the software processes untrusted input. A remote attacker could submit a specially crafted image file that triggers an invalid memory free condition in the Magick Vector Graphics MVG decoder, causing the...

CVE-2026-106573

A flaw was found in ImageMagick. A missing limit check in the Magick Vector Graphics MVG decoder allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted image file. Processing this malicious input triggers an excessively long-running operation that exhausts syst...

JLSEC-2026-939 ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

JLSEC-2026-1038 ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...

ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

A missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided...

CVE-2026-55577

A flaw was found in ImageMagick, free and open-source software for editing and manipulating digital images. A heap buffer overflow occurs in the MVG Magick Vector Graphics decoder when processing a specially crafted image. This vulnerability could allow an attacker to cause an out-of-bounds write...

CVE-2026-55594

A flaw was found in ImageMagick, free and open-source software for editing and manipulating digital images. A missing depth check in the MVG Magick Vector Graphics decoder can lead to a stack overflow when a remote attacker provides a specially crafted image. This vulnerability could result in a...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Improper Check for Unusual or Exceptional Conditions

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

CVE-2026-55594

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...

ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection

A flaw was found in ImageMagick. This command injection vulnerability in the SVG Scalable Vector Graphics decoder allows a remote attacker to craft malicious SVG files. When these files are processed, the injected Magick Vector Graphics MVG commands can execute, potentially leading to arbitrary...

ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

A crafted MVG file could result in a stack overflow due to a missing depth or visited-set check...

CVE-2026-56379

A flaw was found in ImageMagick. This command injection vulnerability in the SVG Scalable Vector Graphics decoder allows a remote attacker to craft malicious SVG files. When these files are processed, the injected Magick Vector Graphics MVG commands can execute, potentially leading to arbitrary...