DEBIAN-CVE-2026-116144: Medium severity debian/imagemagick vulnerability

Q: Which ImageMagick versions are affected?

ImageMagick versions before 6.9.13-58 and 7.x versions before 7.1.2-33 are affected.

Q: What does an attacker need to do to trigger the issue?

An attacker must provide a crafted MVG file and have it processed by the MVG decoder with specific arguments. Successful exploitation exhausts the process stack and crashes the process.

Q: What is the practical impact?

The documented impact is denial of service through a process crash. The supplied severity vector indicates local attack vector and user interaction is required.

Published Oct 25, 2026

Updated

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow. Attackers can supply a crafted MVG file that, when read with specific arguments, exhausts the stack and crashes the process, causing a denial of service.

Affected Software

3 affected componentsFixes available

debian/imagemagick*

debian/imagemagick<8:7.1.2.33+dfsg1-1

8:7.1.2.33+dfsg1-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/imagemagick to a version that resolves this vulnerability.
Fixed in 8:7.1.2.33+dfsg1-1

Event History

Oct 25, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which ImageMagick versions are affected?

ImageMagick versions before 6.9.13-58 and 7.x versions before 7.1.2-33 are affected.

What does an attacker need to do to trigger the issue?

An attacker must provide a crafted MVG file and have it processed by the MVG decoder with specific arguments. Successful exploitation exhausts the process stack and crashes the process.

What is the practical impact?

The documented impact is denial of service through a process crash. The supplied severity vector indicates local attack vector and user interaction is required.

DEBIAN-CVE-2026-116144: Medium severity debian/imagemagick vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which ImageMagick versions are affected?

What does an attacker need to do to trigger the issue?

What is the practical impact?

Company

Resources

Contact

Frequently Asked Questions

Which ImageMagick versions are affected?

What does an attacker need to do to trigger the issue?

What is the practical impact?