PatchSiren cyber security CVE debrief
CVE-2026-53465 ImageMagick CVE debrief
CVE-2026-53465 is a medium-severity vulnerability in ImageMagick, a free and open-source software for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25.
- Vendor
- ImageMagick
- Product
- Unknown
- CVSS
- MEDIUM 6.2
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-10
- Original CVE updated
- 2026-06-11
- Advisory published
- 2026-06-10
- Advisory updated
- 2026-06-11
Who should care
Users of ImageMagick, particularly those who process multi-frame images with the SF3 encoder, should be aware of this vulnerability and take steps to update to version 7.1.2-25 or later.
Technical summary
The vulnerability is caused by a heap buffer over-write when encoding a crafted multi-frame image with the SF3 encoder. This can be exploited by an attacker to potentially execute arbitrary code or cause a denial of service.
Defensive priority
Medium
Recommended defensive actions
- Update ImageMagick to version 7.1.2-25 or later.
- Avoid processing untrusted multi-frame images with the SF3 encoder.
Evidence notes
The CVE-2026-53465 vulnerability was published on [cvePublishedAt] and modified on [cveModifiedAt]. The vulnerability has a CVSS score of 6.2 and is classified as CWE-122 and CWE-787.
Official resources
-
CVE-2026-53465 CVE record
CVE.org
-
CVE-2026-53465 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
CVE-2026-53465 was published on 2026-06-10T23:16:50.997Z and modified on 2026-06-11T18:43:07.153Z.