PatchSiren cyber security CVE debrief
CVE-2026-53462 ImageMagick CVE debrief
CVE-2026-53462 is a medium-severity vulnerability in ImageMagick, a free and open-source software for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when an allocation fails in CheckPrimitiveExtent, this can result in a heap-use-after-free and lead to a crash.
- Vendor
- ImageMagick
- Product
- Unknown
- CVSS
- MEDIUM 5.9
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-10
- Original CVE updated
- 2026-06-11
- Advisory published
- 2026-06-10
- Advisory updated
- 2026-06-11
Who should care
Users of ImageMagick versions prior to 6.9.13-50 and 7.1.2-25 should update to the latest versions to mitigate this vulnerability.
Technical summary
The vulnerability is caused by a heap-use-after-free error in the CheckPrimitiveExtent function. This occurs when an allocation fails, leading to a crash. The CVSS score for this vulnerability is 5.9, with a severity rating of MEDIUM.
Defensive priority
MEDIUM
Recommended defensive actions
- Update to ImageMagick versions 6.9.13-50 or 7.1.2-25 or later.
Evidence notes
The CVE-2026-53462 vulnerability was published on [cvePublishedAt] and modified on [cveModifiedAt]. The vulnerability affects ImageMagick versions prior to 6.9.13-50 and 7.1.2-25.
Official resources
-
CVE-2026-53462 CVE record
CVE.org
-
CVE-2026-53462 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-53462 was published on 2026-06-10T23:16:50.580Z and modified on 2026-06-11T18:43:32.803Z.