PT-2026-51514 · Imagemagick · Imagemagick

Phenggeler · Publicado 2026-06-23 · Atualizado 2026-06-23 · CVE-2026-56379

NVD

CVSS v3.1

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

Correção

Improper Encoding or Escaping of Output

Enumeração de Fraquezas

CWE-116

Identificadores relacionados

CVE-2026-56379

Produtos afetados

Imagemagick

Referências · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xpg8-7m6m-jf56 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-56379 · Nota de Segurança
• https://vulncheck.com/advisories/imagemagick-command-injection-via-svg-decoder · Nota