CVE-2026-116160: ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate

Q: Which deployments are exposed to this issue?

ImageMagick versions earlier than 6.9.13-58 and 7.x versions earlier than 7.1.2-33 are affected when the X11 animate operation is used to process a crafted image.

Q: What must an attacker do to trigger the flaw?

An attacker must provide a malicious image and induce a user to run the X11 animate operation on that image. The described outcome is heap-memory corruption that can crash the application.

Q: Does exploitation require prior access or elevated privileges?

No prior privileges are required according to the provided vector, but user interaction is required. Exploitation is local and depends on a user processing the attacker-supplied image through X11 animate.

Published Oct 25, 2026

Updated

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images. Attackers can supply a malicious image that, when a user runs an X11 animate operation on it, overwrites heap memory and can crash the application.

Affected Software

1 affected component

ImageMagick ImageMagick<6.9.13-58, <7.1.2-33

Event History

Oct 25, 2026

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

ImageMagick versions earlier than 6.9.13-58 and 7.x versions earlier than 7.1.2-33 are affected when the X11 animate operation is used to process a crafted image.

What must an attacker do to trigger the flaw?

An attacker must provide a malicious image and induce a user to run the X11 animate operation on that image. The described outcome is heap-memory corruption that can crash the application.

Does exploitation require prior access or elevated privileges?

No prior privileges are required according to the provided vector, but user interaction is required. Exploitation is local and depends on a user processing the attacker-supplied image through X11 animate.

CVE-2026-116160: ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker do to trigger the flaw?

Does exploitation require prior access or elevated privileges?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What must an attacker do to trigger the flaw?

Does exploitation require prior access or elevated privileges?