ImageMagick images processed by the PICT decoder can contain malformed header values that cause a 32‑bit pointer arithmetic overflow in the DecodeImage() function. An attacker who supplies a specially crafted PICT file with maximized row, column, and bytes‑per‑line fields can bypass bounds checks and write up to 128 bytes of controlled data below a heap buffer. This heap buffer underwrite can cause the application to crash or, if the corrupted data is executed, allow arbitrary code execution. The flaw is a classic buffer underwrite (CWE‑124) and therefore impacts integrity and availability of systems that invoke the affected decoder.

The vulnerability exists in ImageMagick releases prior to 7.1.2-33 and 6.9.13-58, on 32‑bit builds. Any deployment that uses these versions and processes PICT files – for example web servers, imaging services, or content‑management systems that rely on ImageMagick – is affected. Upgrading beyond the identified revision or disabling PICT support removes the authority for the exploit.

The CVSS v3 score of 6.3 indicates a moderate severity. No EPSS score is available, so current exploit probability is unknown, but the flaw is exploitable through a crafted file, which is a common attack vector for image processing libraries. The issue is not listed in CISA’s KEV catalog, suggesting no known mass exploitation yet. However, systems that accept user supplied images and run on 32‑bit ImageMagick could be targeted by mounting a denial‑of‑service attack or attempting to execute code via the underwrite.