ImageMagick is a free, open-source image processing tool. Versions prior to 6.9.13‑52 and 7.1.2‑27 suffer from an integer overflow when handling extremely large JNX files on 32‑bit platforms. The overflow corrupts heap memory, leading to a heap buffer over‑write. This weakness is classified as CWE‑190. The overflow causes memory corruption that might disrupt image processing or compromise the stability of the application; the advisory does not specify further exploit possibilities.

Affected products include ImageMagick’s ImageMagick suite on 32‑bit builds. The vulnerability affects all releases older than 6.9.13‑52 and 7.1.2‑27; newer releases contain the fix.

The CVSS score of 5.1 indicates moderate severity, while the EPSS of < 1% shows a very low exploitation probability at the time of assessment. ImageMagick is not listed in the CISA KEV catalog, and the attack vector is inferred to be remote via a crafted JNX file processed by the vulnerable software, requiring no additional privileges.