{"id":"CVE-2026-116148","title":"ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder (CVE-2026-116148)","summary":"A flaw was found in ImageMagick. The Magick Vector Graphics (MVG) encoder does not properly neutralize user-specified drawing options before writing them into generated output. An attacker capable of supplying drawing options can exploit t…","severity":"low","cvss":3.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N","cvssSource":"vendor","cwe":["CWE-94","CWE-79"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","affected":["enterprise_linux 6","enterprise_linux 7"],"published":"2026-10-25","updated":"2026-10-25","sourceUpdated":"2026-10-25T13:55:27+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116148.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116148.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-116148"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2560407"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-116148"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116148"},{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4"},{"url":"https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-33-code-injection-via-mvg-encoder-drawing-options"}],"tags":["csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-25T22:08:29.953Z","epss":0.00138,"epssPercentile":0.03178,"slug":"CVE-2026-116148","body":"## Overview\n\nA flaw was found in ImageMagick. The Magick Vector Graphics (MVG) encoder does not properly neutralize user-specified drawing options before writing them into generated output. An attacker capable of supplying drawing options can exploit this vulnerability to inject arbitrary drawing commands into the resulting MVG file, potentially leading to unauthorized information disclosure.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7 · updated 2026-10-25 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-116148.json)\n\n**ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder** — rated Low by Red Hat. Released 2026-10-25.\n\nAffected:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n\n## Remediation\n\nOut of support scope","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":19.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}