UBUNTU-CVE-2026-116153: Buffer Overflow
ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supply crafted images processed with convex-hull calculations to corrupt heap memory, causing crashes or potential code execution.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
The issue affects ImageMagick versions before 7.1.2-33 on 32-bit systems. Exploitation requires processing an attacker-crafted image with convex-hull calculations requested.
Does exploitation require prior access or user interaction?
The supplied severity vector indicates no privileges are required, but user interaction is required. It also indicates local attack vector and high attack complexity.
What is the impact if exploitation succeeds?
A crafted image can overwrite heap memory during convex-hull processing. This can cause a crash and may enable code execution; the provided vector rates availability impact as low and confidentiality and integrity impacts as none.