Home / Vulnerability Intelligence / CVE-2026-4755

CVE-2026-4755 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 24, 2026

MolotovCherry Android-ImageMagick7 - Input Validation

Published: March 24, 2026Updated: March 24, 2026Remote Exploitable

Overview

MolotovCherry Android-ImageMagick7 < 7.1.2-11 contains an input validation vulnerability caused by improper input validation, letting attackers potentially cause unexpected behavior, exploit requires crafted input.

Severity & Score

Severity: Critical

CVSS Score: 9.8

EPSS Score: 6.3%(Probability of exploitation in next 30 days)

Impact

Attackers can cause unexpected behavior or application errors, potentially leading to denial of service or other impacts.

Mitigation

Update to version 7.1.2-11 or later.

References

https://github.com/MolotovCherry/Android-ImageMagick7/pull/193

Social Media Activity(1 post)

Offensive Sequence

@offseq

Mar 24, 2026

⚠️ CVE-2026-4755: Critical vuln in MolotovCherry Android-ImageMagick7 (<7.1.2-11). Remote, unauthenticated RCE possible due to improper input validation. Patch ASAP & enforce input checks. Details: https://radar.offseq.com/threat/cve-2026-4755-cwe-20-cwe-20-in-molotovcherry-andro-fb2c95b0 #OffSeq #Android #Vuln #ImageMagick #CVE2026_4755

View original post

Related Resources

Details

CVE ID: CVE-2026-4755
Severity: Critical
CVSS Score: 9.8
Type: misconfiguration
Status: unconfirmed
EPSS: 6.3%
Social Posts: 1

CWE

CWE-20

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

6.3%Probability of exploitation in the next 30 days