CVE Database›Document archive›CVE-2026-53463

CVE-2026-53463

ImageMagick: ImageMagick: Denial of Service via incorrect arguments in distort operation

Loading…

Severity

Moderate

Red Hat Product Security

6.5

CVSS 3.1

Review impact separately from score.

Published · June 11, 2026

Updated · August 18, 2026

Description

A flaw was found in ImageMagick. When processing images, a remote attacker could provide incorrect arguments to the distort operation, leading to a null pointer dereference. This vulnerability can cause the application to crash, resulting in a Denial of Service (DoS) for affected systems.

Statement

This flaw in ImageMagick is rated as Moderate. A remote attacker could trigger a denial of service by providing specially crafted image arguments to the distort operation, leading to a null pointer dereference and application crash. Exploitation requires user interaction, limiting the immediate impact on Red Hat systems.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference