CVE-2026-116153Low· 2.5▾ SunlitA flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially craf…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
A flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially crafted image requiring convex-hull calculations, an attacker can trigger a heap-based buffer overflow. This memory corruption causes the application to crash, disrupting service availability.
ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations — rated Low by Red Hat. Released 2026-10-25.
Affected:
No fix planned:
Out of support scope
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116124High· 7.8libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser (CVE-2026-116124)
CVE-2026-116149High· 7.8ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images (CVE-2026-116149)
CVE-2026-116160Low· 3.3ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation (CVE-2026-116160)
CVE-2026-63384High· 7.5Libevent is an event notification library
CVE-2026-116141Medium· 5.3ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder (CVE-2026-116141)
CVE-2026-116140Low· 3.3ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing (CVE-2026-116140)