CVE-2026-53462
ImageMagick: ImageMagick: Denial of Service due to heap-use-after-free in CheckPrimitiveExtent
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 11, 2026
Updated · August 19, 2026
Description
A flaw was found in ImageMagick. When an allocation fails in the CheckPrimitiveExtent function, it can lead to a heap-use-after-free vulnerability. This memory corruption issue can result in a denial of service (DoS) by causing the application to crash.
Statement
This flaw in ImageMagick is rated as Low impact. A heap-use-after-free vulnerability, triggered by a memory allocation failure during image processing, can lead to a denial of service. The high attack complexity required for exploitation reduces the overall risk to system availability in Red Hat environments.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-825 · Expired Pointer Dereference