Heap Buffer Overflow in ImageMagick Affects 32-Bit Systems
CVE-2026-116153

2LOW

Key Information:

Vendor

Imagemagick
Status
Imagemagick
Vendor
CVE Published:
25 October 2026

What is CVE-2026-116153?

ImageMagick versions prior to 7.1.2-33 are susceptible to a heap buffer overflow vulnerability specifically affecting 32-bit systems. When processing images that include convex-hull calculations, attackers may exploit this vulnerability to overwrite heap memory, leading to potential crashes and the execution of arbitrary code. This poses significant risks to applications utilizing ImageMagick for image processing, underscoring the need for immediate updates.

Affected Version(s)

ImageMagick 0 < 7.1.2-33

ImageMagick 7.1.2-33

References

https://github.com/ImageMagick/ImageMagick/security/advis...
vendor-advisory
https://www.vulncheck.com/advisories/imagemagick-before-7...
third-party-advisory

CVSS V4

Score:
2
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

bewithyash
.