CVE-2026-116149
Received Received - Intake

Stack-Based Buffer Overflow in ImageMagick via Bzip2 Images

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulnCheck

Description
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-25
Last Modified
2026-10-25
Generated
2026-10-25
AI Q&A
2026-10-25
EPSS Evaluated
N/A
NVD
CVE-2026-116149
EUVD
EUVD-2026-109410

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ImageMagick ImageMagick 7.0.0-0
ImageMagick ImageMagick 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33. It occurs when processing bzip2-compressed images. Attackers can craft malicious images that overwrite stack memory during decoding, leading to crashes or memory corruption.

Detection Guidance

To detect this vulnerability, check the installed version of ImageMagick using the command 'convert --version' or 'magick --version'. If the version is below 7.1.2-33 or 6.9.13-58, the system is vulnerable. Inspect network traffic for bzip2-compressed images being processed by ImageMagick.

Impact Analysis

Exploitation could allow attackers to execute arbitrary code or cause denial of service. The vulnerability requires low privileges and no user interaction, making it remotely exploitable over a network. It affects integrity and availability of systems running vulnerable ImageMagick versions.

Compliance Impact

This vulnerability could potentially lead to unauthorized code execution or denial of service, which may result in data breaches or loss of availability. Such incidents could violate GDPR's integrity and availability requirements or HIPAA's security rules for protected health information.

Mitigation Strategies

Immediately update ImageMagick to version 7.1.2-33 or later for version 7.x, or 6.9.13-58 or later for version 6.x. Disable processing of bzip2-compressed images if not required. Monitor for crashes or memory corruption in ImageMagick processes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116149. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart