CVE-2026-109964 affects ImageMagick. A crafted PICT file can trigger a heap buffer underwrite in the PICT decoder on 32-bit builds, leading to crashes or possible code execution. Versions before 7.1.2-33 and 6.9.13-58 are affected. No exploitation is confirmed. Update to 7.1.2-33 or 6.9.13-58. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w #infosec #cybersecurity