Live › vulnerability › CVE-2026-116153
Go to dashboardImageMagick before 7.1.2-33 has a heap buffer overflow on 32-bit systems when convex-hull information is requested for a crafted image. An attacker who supplies such an image can corrupt heap memory, causing crashes or potentially running code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-25 14:41 UTC. All times on this page are UTC.
Teams that run ImageMagick builds before 7.1.2-33 on 32-bit systems and process images from untrusted sources, where a crafted image can trigger convex-hull calculations. 64-bit deployments and systems that never handle untrusted images are less exposed, though the sources do not confirm the 64-bit case.
No product ranges from the sources yet.
magick -version and compare the reported version with 7.1.2-337.1.2-33 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-116153")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.