An out-of-bounds write has been identified in the Android-ImageMagick7 implementation by MolotovCherry. The flaw allows a malicious user to corrupt memory, which could lead to arbitrary code execution or application crash. The weakness is a classic buffer overflow (CWE-787) that undermines data integrity and can compromise system confidentiality.

Devices running the MolotovCherry Android-ImageMagick7 library before version 7.1.2-10 are affected. This includes any application that incorporates that library to decode or process image data on Android.

The CVSS score of 8.8 indicates a high severity, and the EPSS score of less than 1% suggests that current exploitation activity is low. Because the vulnerability is triggered by crafted image input, it could be exploited remotely if the application accepts untrusted images. The vulnerability is not listed in the CISA KEV catalog, but the high CVSS warrants prompt remediation.