CVE-2026-53463
ImageMagick: ImageMagick: Denial of Service via incorrect arguments in distort operation
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 11, 2026
Updated · August 18, 2026
Description
A flaw was found in ImageMagick. When processing images, a remote attacker could provide incorrect arguments to the distort operation, leading to a null pointer dereference. This vulnerability can cause the application to crash, resulting in a Denial of Service (DoS) for affected systems.
Statement
This flaw in ImageMagick is rated as Moderate. A remote attacker could trigger a denial of service by providing specially crafted image arguments to the distort operation, leading to a null pointer dereference and application crash. Exploitation requires user interaction, limiting the immediate impact on Red Hat systems.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference