Medium severity5.5NVD Advisory· Published Jun 10, 2026· Updated Jun 11, 2026

CVE-2026-48734

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, a crafted MVG file could result in a stack overflow due to a missing depth or visited-set check. This issue has been patched in versions 6.9.13-49 and 7.1.2-24.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ImageMagick/Imagemagickllm-fuzzy
Range: <6.9.13-49, <7.1.2-24
osv-coords12 versions
pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6
< 7.1.2.25-2.1+ 11 more
- (no CPE)range: < 7.1.2.25-2.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1
- (no CPE)range: < 7.1.0.9-150400.6.87.1

Patches

Vulnerability mechanics

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489nvdVendor Advisory

News mentions

ImageMagick: 25 Vulnerabilities Disclosed in Single Batch on June 10, 2026
Vypr Intelligence · Jun 10, 2026

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000