◆ CVE Hub

CVE-2026-116148

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options

Published
2026-10-25
Last modified
2026-10-25
CNA
VulnCheck
CWE
CWE-79
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
4.8
MEDIUM
Scored by CNA (VulnCheck) · v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
EPSS exploit probability
—
Not computed
CISA KEV
—
Not listed

Attack conditions and impact

Derived from the CNA CVSS 4.0 vector
LocalNo authUser action Scope change Confidentiality LIntegrity NAvailability N
MetricValueMeaning
Attack vector AVLLocal
Attack complexity ACLLow (easy)
Attack requirements ATNNone
Privileges required PRNNone
User interaction UIPPassive
Confidentiality (vulnerable system) VCLLow
Integrity (vulnerable system) VINNone
Availability (vulnerable system) VANNone
Confidentiality (subsequent systems) SCLLow
Integrity (subsequent systems) SINNone
Availability (subsequent systems) SANNone
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Description

CNA (VulnCheck)

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options before writing them into generated MVG output. Attackers who can supply drawing options can inject arbitrary MVG drawing commands into the resulting MVG file.

CVSS assessments

ProviderVersionScoreVector
CNA / VulnCheck4.04.8 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
CNA / VulnCheck3.13.6 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Affected products and packages

CNA (CVE.org)

VendorProductVersions
ImageMagickImageMagick
affected: 7.0.0-0 … < 7.1.2-33
unaffected: 7.1.2-33
default: unaffected
ImageMagickImageMagick
affected: 0 … < 6.9.13-58
unaffected: 6.9.13-58
default: unaffected

Linux distribution status

Red Hat ↗

No record

Debian ↗

No record

Ubuntu ↗

No record

References (2)