CVE-2026-116153

What it actually does

Heap buffer overflow on 32-bit systems allowing overwrite of heap memory when convex-hull information is requested from crafted images, leading to memory corruption, crashes, or potential code execution.

Why it matters to the business

Disrupts image processing operations on 32-bit systems, causing application instability or enabling limited unauthorized code execution in environments handling untrusted images.

How an attack unfolds

An attacker supplies a specially crafted image file that triggers convex-hull calculations. On 32-bit systems, this overflows a heap buffer during processing, corrupting memory and potentially resulting in crashes or code execution.

How to fix it

Upgrade ImageMagick to version 7.1.2-33 or later on all affected 32-bit systems.

How to confirm the fix worked

Confirm installed version meets or exceeds 7.1.2-33; test processing of images known to exercise convex-hull functionality for absence of crashes or memory errors.

Typical attack path

1. Deliver a malicious image file to a vulnerable ImageMagick installation
2. Trigger processing that requests convex-hull information
3. Exploit the resulting heap buffer overflow to corrupt memory
4. Achieve crash or attempt code execution

How to detect it

Review application and system logs for ImageMagick process crashes or heap-related errors during image handling; inspect for sudden terminations when convex-hull calculations occur.

What your security team should do

• Apply the 7.1.2-33 update immediately on 32-bit deployments
• Disable convex-hull operations or restrict untrusted image input until patched
• Monitor image-processing services for unexpected crashes