The vulnerability is an integer overflow that occurs during the despeckle operation in ImageMagick on 32‑bit builds. The overflow corrupts the heap by writing beyond an allocated buffer. This out‑of‑bounds write can compromise the integrity of the process's memory and, if an attacker can trigger it, may allow arbitrary code execution or data tampering.

The flaw affects ImageMagick releases prior to 7.1.2‑19 and 6.9.13‑44 when built for 32‑bit architectures. All 64‑bit builds and later releases are immune. Software that embeds the vulnerable binary, such as the .NET wrapper Magick.NET before version 14.12.0, is also impacted.

The CVSS score of 5.1 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. The likely means of exploitation is by supplying a crafted image to a vulnerable service that performs despeckle on a 32‑bit build; this inference is made from the description of the overflow during image processing and not from an explicit exploitation statement.