PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-53463 ImageMagick CVE debrief

CVE-2026-53463 is a medium-severity vulnerability in ImageMagick, a free and open-source software used for editing and manipulating digital images. The vulnerability occurs when passing incorrect arguments in the distort operation, leading to a null pointer dereference. This issue has been patched in versions 6.9.13-50 and 7.1.2-25.

Vendor
ImageMagick
Product
Unknown
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-10
Original CVE updated
2026-06-11
Advisory published
2026-06-10
Advisory updated
2026-06-11

Who should care

Users of ImageMagick versions prior to 6.9.13-50 and 7.1.2-25 should update to the latest versions to mitigate this vulnerability.

Technical summary

The vulnerability is caused by a null pointer dereference when passing incorrect arguments in the distort operation. The CVSS score is 4.3, with a severity of MEDIUM. The vulnerability was published on 2026-06-10T23:16:50.720Z and modified on 2026-06-11T18:43:19.833Z.

Defensive priority

MEDIUM

Recommended defensive actions

  • Update to ImageMagick versions 6.9.13-50 or 7.1.2-25 or later.

Evidence notes

The vulnerability is tracked by CVE-2026-53463 and has a CVSS score of 4.3. The vulnerability was published on 2026-06-10T23:16:50.720Z and modified on 2026-06-11T18:43:19.833Z.

Official resources

CVE-2026-53463 was published on 2026-06-10T23:16:50.720Z and modified on 2026-06-11T18:43:19.833Z.