This vulnerability is an integer overflow or wraparound in the Android-ImageMagick7 library before version 7.1.2-11. The flaw can cause incorrect memory calculations or overflows when processing image data, potentially leading to crashes or corrupted output. Consequently, an attacker could leverage the bug to disrupt service or cause unstable behavior in affected applications.

The affected product is MolotovCherry Android-ImageMagick7. All installations of the library with versions earlier than 7.1.2‑11 are vulnerable.

The CVSS score of 5.5 indicates medium severity, and the EPSS score of less than 1% suggests a low probability of exploitation. It is not currently listed in the CISA KEV catalog. The likely attack vector is the delivery of a crafted image file to an application that incorporates the vulnerable ImageMagick library; this could allow an attacker to trigger the overflow and induce a denial of service or memory corruption attack. Given the low EPSS, immediate exposure risk is moderate, but users of the library should apply the vendor‑supplied fix promptly to eliminate any potential attack surface.