CVE-2026-116153

A flaw was found in ImageMagick. An attacker could exploit this vulnerability to cause a Denial of Service (DoS) or potentially execute arbitrary code on 32-bit systems. By convincing a user or automated service to process a specially crafted image requiring convex-hull calculations, an attacker can trigger a heap-based buffer overflow. This memory corruption causes the application to crash, disrupting service availability.

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because exploitation is restricted to 32-bit architectures and requires processing a maliciously crafted image during convex-hull operations. Red Hat Enterprise Linux is primarily deployed on 64-bit platforms, where this integer overflow leading to heap corruption does not occur. Furthermore, triggering the condition requires local user interaction or an application explicitly evaluating convex-hull properties, with successful exploitation primarily resulting in a process crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.