CVE-2026-53463
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile — higher than 11% of all known CVEs
Summary
ImageMagick prior to versions 6.9.13-50 and 7.1.2-25 had a vulnerability that led to a null pointer dereference when passing incorrect arguments in the distort operation. This issue has been patched in versions 6.9.13-50 and 7.1.2-25.
Risk Assessment
Exploitation of this vulnerability may lead to application crashes or unauthorized access to the system. Organizations should be aware of the risks associated with using outdated software versions.
Recommendation
It is recommended to update ImageMagick to versions 6.9.13-50 or 7.1.2-25 to mitigate this vulnerability. Regular software updates are crucial for maintaining system security.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched in versions 6.9.13-50 and 7.1.2-25.