CVE-2026-116160Low· 3.3▾ SunlitA flaw was found in ImageMagick. An attacker can cause a Denial of Service (DoS) by tricking a user into processing a specially crafted image file using the X11 animate feature. Processing the image triggers a heap-based buffer overflow, w…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
A flaw was found in ImageMagick. An attacker can cause a Denial of Service (DoS) by tricking a user into processing a specially crafted image file using the X11 animate feature. Processing the image triggers a heap-based buffer overflow, writing data beyond allocated memory limits, which corrupts memory and crashes the application.
ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation — rated Low by Red Hat. Released 2026-10-25.
Affected:
No fix planned:
Out of support scope
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116124High· 7.8libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser (CVE-2026-116124)
CVE-2026-116153Low· 2.5ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations (CVE-2026-116153)
CVE-2025-71436High· 7.1raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling (CVE-2025-71436)
CVE-2026-116140Low· 3.3ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing (CVE-2026-116140)
CVE-2026-116148Low· 3.6ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder (CVE-2026-116148)
CVE-2026-116152Medium· 5.3ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder (CVE-2026-116152)