CVE-2026-48734: ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

June 25, 2026

A crafted MVG file could result in a stack overflow due to a missing depth or visited-set check.

References

github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489
github.com/advisories/GHSA-h36c-3666-h489
github.com/dlemstra/Magick.NET/releases/tag/14.14.0
nvd.nist.gov/vuln/detail/CVE-2026-48734

Code Behaviors & Features

Detect and mitigate CVE-2026-48734 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →