CVE Database›Document archive›CVE-2026-53462

CVE-2026-53462

ImageMagick: ImageMagick: Denial of Service due to heap-use-after-free in CheckPrimitiveExtent

Loading…

Severity

Low

Red Hat Product Security

3.7

CVSS 3.1

Review impact separately from score.

Published · June 11, 2026

Updated · August 19, 2026

Description

A flaw was found in ImageMagick. When an allocation fails in the CheckPrimitiveExtent function, it can lead to a heap-use-after-free vulnerability. This memory corruption issue can result in a denial of service (DoS) by causing the application to crash.

Statement

This flaw in ImageMagick is rated as Low impact. A heap-use-after-free vulnerability, triggered by a memory allocation failure during image processing, can lead to a denial of service. The high attack complexity required for exploitation reduces the overall risk to system availability in Red Hat environments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 3.7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-825 · Expired Pointer Dereference