PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-53464 ImageMagick CVE debrief

CVE-2026-53464 is a medium-severity vulnerability in ImageMagick, a free and open-source software for editing and manipulating digital images. The vulnerability occurs when providing invalid options to the wand option parser, resulting in a small memory leak. This issue has been patched in version 7.1.2-25.

Vendor
ImageMagick
Product
Unknown
CVSS
MEDIUM 4
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-10
Original CVE updated
2026-06-11
Advisory published
2026-06-10
Advisory updated
2026-06-11

Who should care

Users of ImageMagick versions prior to 7.1.2-25 should update to the latest version to prevent potential memory leaks.

Technical summary

The vulnerability has a CVSS score of 4 and a CVSS severity of MEDIUM. The CVSS vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. The weakness is classified as CWE-401.

Defensive priority

MEDIUM

Recommended defensive actions

  • Update ImageMagick to version 7.1.2-25 or later.

Evidence notes

The vulnerability was published on [cve-org](https://www.cve.org/CVERecord?id=CVE-2026-53464) and has a detailed description on [nvd](https://nvd.nist.gov/vuln/detail/CVE-2026-53464). A vendor advisory is available on [ref-4](https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335).

Official resources

CVE-2026-53464 was published on 2026-06-10T23:16:50.857Z and modified on 2026-06-11T18:43:13.637Z.