DEBIAN-CVE-2026-116153: Buffer Overflow

Q: Which systems are exposed to this issue?

The issue affects ImageMagick versions before 7.1.2-33 on 32-bit systems. The provided information does not indicate an impact on 64-bit systems.

Q: What must an attacker be able to do to trigger the vulnerability?

An attacker needs to supply a crafted image that is processed using convex-hull calculations. Exploitation requires local attack vector conditions, high attack complexity, and user interaction according to the supplied severity vector.

Q: What can happen if exploitation succeeds?

The crafted image can cause a heap buffer overflow and overwrite heap memory. This may crash the affected process or potentially allow code execution.

Q: What version resolves the issue?

Upgrade ImageMagick to version 7.1.2-33 or later.

Published Oct 25, 2026

Updated

ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution.

Affected Software

3 affected componentsFixes available

debian/imagemagick*

debian/imagemagick<8:7.1.2.33+dfsg1-1

8:7.1.2.33+dfsg1-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/imagemagick to a version that resolves this vulnerability.
Fixed in 8:7.1.2.33+dfsg1-1

Event History

Oct 25, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this issue?

The issue affects ImageMagick versions before 7.1.2-33 on 32-bit systems. The provided information does not indicate an impact on 64-bit systems.

What must an attacker be able to do to trigger the vulnerability?

An attacker needs to supply a crafted image that is processed using convex-hull calculations. Exploitation requires local attack vector conditions, high attack complexity, and user interaction according to the supplied severity vector.

What can happen if exploitation succeeds?

The crafted image can cause a heap buffer overflow and overwrite heap memory. This may crash the affected process or potentially allow code execution.

What version resolves the issue?

Upgrade ImageMagick to version 7.1.2-33 or later.

DEBIAN-CVE-2026-116153: Buffer Overflow

Affected Software

Remediation

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What must an attacker be able to do to trigger the vulnerability?

What can happen if exploitation succeeds?

What version resolves the issue?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What must an attacker be able to do to trigger the vulnerability?

What can happen if exploitation succeeds?

What version resolves the issue?