CVE-2026-116142

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-33

Description A heap buffer over-read occurs when printing a minimum-bounding-box, which is the smallest rectangle that encompasses all non-zero pixels in an image. An attacker can provide a specially crafted image that triggers this issue during the output process, potentially leading to application crashes or the exposure of sensitive data from adjacent heap memory.

Recommendations Update to version 7.1.2-33 or later.