PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-53460 ImageMagick CVE debrief

CVE-2026-53460 is a HIGH severity vulnerability in ImageMagick, a free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in versions 6.9.13-50 and 7.1.2-25.

Vendor
ImageMagick
Product
Unknown
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-10
Original CVE updated
2026-06-11
Advisory published
2026-06-10
Advisory updated
2026-06-11

Who should care

Users of ImageMagick versions prior to 6.9.13-50 and 7.1.2-25 should apply the patches to prevent potential out-of-Memory conditions.

Technical summary

The vulnerability exists in the AcquireAlignedMemory function of ImageMagick, where a missing check for maximum memory request could lead to an out-of-Memory condition. The CVSS score for this vulnerability is 7.5, indicating a HIGH severity.

Defensive priority

HIGH

Recommended defensive actions

  • Apply patches: Upgrade to ImageMagick versions 6.9.13-50 or 7.1.2-25 or later.
  • Workaround: None mentioned.

Evidence notes

The CVE record and NVD detail pages provide additional information about this vulnerability.

Official resources

CVE-2026-53460 was published on [2026-06-10T23:16:50.287Z].