{"id":"CVE-2026-116153","kind":"vulnerability","aliases":["CVE-2026-116153"],"related":[],"title":"ImageMagick: heap overflow on 32-bit systems via crafted convex-hull images","description":"ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution.","summary":"ImageMagick before 7.1.2-33 has a heap buffer overflow on 32-bit systems when convex-hull information is requested for a crafted image. An attacker who supplies such an image can corrupt heap memory, causing crashes or potentially running code.","severity":"low","cvss":2.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["32-bit","image-processing","imagemagick","package"],"not_affected_if":["64-bit-only","no-untrusted-images"],"how_to_check":"- Run `magick -version` and compare the reported version with `7.1.2-33`\n- unknown","fix":"- Upgrade ImageMagick to `7.1.2-33` or later\n- unknown","status":"open","published_at":"2026-10-25T14:16:53+00:00","first_seen_at":"2026-10-25T14:41:22+00:00","triaged_at":"2026-10-25T14:44:20+00:00","updated_at":"2026-10-25T14:44:20+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T14:44:20Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade ImageMagick to `7.1.2-33` or later\n- unknown","reach":"unknown","title":"ImageMagick: heap overflow on 32-bit systems via crafted convex-hull images","impact":"medium","summary":"ImageMagick before 7.1.2-33 has a heap buffer overflow on 32-bit systems when convex-hull information is requested for a crafted image. An attacker who supplies such an image can corrupt heap memory, causing crashes or potentially running code.","category":"package","nicknames":[],"who_cares":["imagemagick","32-bit","image-processing"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Heap memory corruption leading to crashes or possible code execution","analyst_note":"Confirm the fixed version and whether 64-bit builds are affected; check the NVD entry and the ImageMagick release notes for 7.1.2-33.","how_to_check":"- Run `magick -version` and compare the reported version with `7.1.2-33`\n- unknown","needs_analyst":true,"not_affected_if":["64-bit-only","no-untrusted-images"],"who_is_affected":"Teams that run ImageMagick builds before 7.1.2-33 on 32-bit systems and process images from untrusted sources, where a crafted image can trigger convex-hull calculations. 64-bit deployments and systems that never handle untrusted images are less exposed, though the sources do not confirm the 64-bit case.","user_interaction":"unknown","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000607,"input_tokens":3337,"output_tokens":546,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-116153':16A,19A '-2026':15A,18A '-33':30B,71C '32':5A,20B,37B,79C '7.1.2':29B,70C 'allow':83C 'attack':52B,84C,96C 'bit':6A,21B,38B,80C 'buffer':34B,75C 'calcul':106C 'caus':62B,111C 'code':67B,115C 'contain':72C 'convex':11A,42B,91C,104C 'convex-hul':10A,41B,90C,103C 'corrupt':59B,108C 'craft':9A,49B,99C 'crash':63B,112C 'cve':14A,17A 'execut':116C 'heap':2A,33B,60B,74C,87C,109C 'hull':12A,43B,92C,105C 'imag':13A,23B,50B,57B,100C 'image-process':22B 'imagemagick':1A,25B,27B,68C 'inform':44B,93C 'memori':61B,88C,110C 'overflow':3A,35B,76C 'overwrit':86C 'packag':26B 'potenti':65B,114C 'process':24B,101C 'request':46B,95C 'run':66B 'suppli':54B,98C 'system':7A,39B,81C 'via':8A 'vulner':77C","nicknames":[],"mitigations":[],"who_affected":"Teams that run ImageMagick builds before 7.1.2-33 on 32-bit systems and process images from untrusted sources, where a crafted image can trigger convex-hull calculations. 64-bit deployments and systems that never handle untrusted images are less exposed, though the sources do not confirm the 64-bit case.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T14:16:53+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116153","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116153","severity":null,"published_at":"2026-10-25T14:16:53+00:00","modified_at":"2026-10-25T14:16:53+00:00","first_seen_at":"2026-10-25T14:41:22+00:00","fetched_at":"2026-10-25T14:41:22+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}