ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.
CVSS Details
- CVSS 4.0 Base Score: 9.2 (CRITICAL)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ImageMagickUpgrade ImageMagick-c++Upgrade ImageMagick-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-perlUpgrade ImageMagick-develUpgrade ImageMagick-c++-devel | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade ImageMagickUpgrade ImageMagick-debugsourceUpgrade ImageMagick-debuginfoUpgrade ImageMagick-develUpgrade ImageMagick-c++-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagick-perl-debuginfoUpgrade ImageMagick-c++-debuginfoUpgrade ImageMagick-docUpgrade ImageMagick-libs-debuginfoUpgrade ImageMagick-libs | Jul 8, 2026 | Jun 23, 2026 |
| Debian | — | Upgrade imagemagick | Jun 29, 2026 | Jun 29, 2026 |
| Redhat_linux | — | Upgrade ImageMagick-docUpgrade ImageMagick-debuginfoUpgrade ImageMagick-c++-develUpgrade ImageMagick-develUpgrade ImageMagick-c++Upgrade ImageMagick-perlUpgrade ImageMagickNo solution exists | Jul 1, 2026 | Jun 23, 2026 |
| Ubuntu | — | Upgrade libmagick++-6.q16hdri-7 (Ubuntu Pro)Upgrade libmagickwand-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-7t64 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3 (Ubuntu Pro)Upgrade libmagickcore-7.q16-10 (Ubuntu Pro)Upgrade libmagickcore-6.q16-2-extra (Ubuntu Pro)Upgrade imagemagick-7-common (Ubuntu Pro)Upgrade imagemagick-common (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-9t64 (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-6 (Ubuntu Pro)Upgrade libmagick++-6-headers (Ubuntu Pro)Upgrade libmagick++-7-headers (Ubuntu Pro)Upgrade libmagick++-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-7-extra (Ubuntu Pro)Upgrade libmagick++-6.q16-7 (Ubuntu Pro)Upgrade libmagickcore-dev (Ubuntu Pro)Upgrade libmagick++-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-3 (Ubuntu Pro)Upgrade libmagickwand-6.q16-6 (Ubuntu Pro)Upgrade imagemagick (Ubuntu Pro)Upgrade libmagickcore-7.q16hdri-10-extra (Ubuntu Pro)Upgrade imagemagick-7.q16 (Ubuntu Pro)Upgrade imagemagick-6.q16hdri (Ubuntu Pro)Upgrade libmagickcore-6.q16-2 (Ubuntu Pro)Upgrade libmagickcore-7.q16hdri-10 (Ubuntu Pro)Upgrade libmagick++-6.q16-8 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6 (Ubuntu Pro)Upgrade libmagickcore-6.q16-3-extra (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-8 (Ubuntu Pro)Upgrade libmagickwand-6.q16-3 (Ubuntu Pro)Upgrade libmagickwand-7.q16hdri-dev (Ubuntu Pro)Upgrade libmagickwand-7.q16-dev (Ubuntu Pro)Upgrade libmagick++-6.q16-9t64 (Ubuntu Pro)Upgrade libmagick++-6.q16hdri-dev (Ubuntu Pro)Upgrade libmagick++-7.q16hdri-dev (Ubuntu Pro)Upgrade libmagickwand-6.q16-dev (Ubuntu Pro)Upgrade libimage-magick-perl (Ubuntu Pro)Upgrade libimage-magick-q16-perl (Ubuntu Pro)Upgrade imagemagick-6-doc (Ubuntu Pro)Upgrade libmagickwand-7-headers (Ubuntu Pro)Upgrade perlmagick (Ubuntu Pro)Upgrade libmagickwand-7.q16-10 (Ubuntu Pro)Upgrade imagemagick-7.q16hdri (Ubuntu Pro)Upgrade libmagickcore-7.q16hdri-dev (Ubuntu Pro)Upgrade libmagickcore-6-headers (Ubuntu Pro)Upgrade libmagick++-7.q16-dev (Ubuntu Pro)Upgrade libmagickcore-6.q16-3 (Ubuntu Pro)Upgrade libmagickwand-6-headers (Ubuntu Pro)Upgrade libmagickcore5 (Ubuntu Pro)Upgrade libmagickcore-7-headers (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-7-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-3-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-7t64 (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-dev (Ubuntu Pro)Upgrade libmagickwand5 (Ubuntu Pro)Upgrade libmagickcore-7.q16-10-extra (Ubuntu Pro)Upgrade libmagickcore-7.q16-dev (Ubuntu Pro)Upgrade imagemagick-6-common (Ubuntu Pro)Upgrade libmagick++-7.q16-5 (Ubuntu Pro)Upgrade imagemagick-7-doc (Ubuntu Pro)Upgrade libmagickwand-7.q16hdri-10 (Ubuntu Pro)Upgrade libmagickcore-6-arch-config (Ubuntu Pro)Upgrade libimage-magick-q16hdri-perl (Ubuntu Pro)Upgrade libmagickcore-6.q16-6-extra (Ubuntu Pro)Upgrade libmagick++5 (Ubuntu Pro)Upgrade libmagickwand-6.q16-7t64 (Ubuntu Pro)Upgrade libmagickcore-6.q16hdri-6-extra (Ubuntu Pro)Upgrade libmagickcore5-extra (Ubuntu Pro)Upgrade libmagickcore-6.q16-6 (Ubuntu Pro)Upgrade imagemagick-6.q16 (Ubuntu Pro)Upgrade libmagick++-7.q16hdri-5 (Ubuntu Pro)Upgrade libmagick++-6.q16-5v5 (Ubuntu Pro)Upgrade libmagickcore-7-arch-config (Ubuntu Pro)Upgrade imagemagick-doc (Ubuntu Pro)Upgrade libmagickwand-6.q16hdri-7t64 (Ubuntu Pro)Upgrade libmagickwand-6.q16-2 (Ubuntu Pro) | Sep 14, 2026 | Sep 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub