CVE-2026-116160

A flaw was found in ImageMagick. An attacker can cause a Denial of Service (DoS) by tricking a user into processing a specially crafted image file using the X11 animate feature. Processing the image triggers a heap-based buffer overflow, writing data beyond allocated memory limits, which corrupts memory and crashes the application.

This vulnerability is rated as Low severity because exploitation is restricted to the local execution context, requires explicit user interaction, and only results in a denial of service. In typical Red Hat Enterprise Linux deployments, ImageMagick is utilized as a standalone utility or library, and the affected X11 animation component is not invoked by default background services or automated image processing pipelines. An attacker must convince a user to interactively inspect a specially prepared graphic file using the animate tool, limiting the blast radius exclusively to the abnormal termination of the viewer process.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Avoid opening or viewing untrusted image files with ImageMagick's interactive X11 animation utility (animate).

If viewing untrusted image sequences is necessary, execute the utility within an isolated, unprivileged container or restricted sandbox to constrain the process and protect the host environment.

Caveat: Refraining from using the animate utility or running it within a restricted sandbox may limit graphical playback functionality or require additional configuration for X11 display forwarding.