Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-33901

Опубликовано: 13 апр. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-44 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-19 (исключая)

EPSS

Процентиль: 44%
0.00566
Низкий

7.5 High

CVSS3

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

CVSS3: 7.5
redhat
4 месяца назад

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.

CVSS3: 7.5
debian
4 месяца назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 7.5
github
4 месяца назад

ImageMagick has a heap Buffer Overflow in ImageMagick MVG decoder

CVSS3: 7.5
fstec
4 месяца назад

Уязвимость декодера формата MVG консольного графического редактора ImageMagick, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 44%
0.00566
Низкий

7.5 High

CVSS3

Дефекты

CWE-122
CWE-787